USN-306-1: MySQL 4.1 vulnerability

MySQL did not correctly handle NULL as the second argument to the strtodate function. An authenticated user could exploit this to crash the server...

MySQL DoS

"select strtodate 1, NULL ;" request causes database server to crash...

[Full-disclosure] Server crash in Empire 4.3.2

Luigi Auriemma Application: Empire http://www.wolfpackempire.com http://sourceforge.net/projects/empserver Versions: = 4.3.2 Platforms: Windows, nix, BSD and more Bug: crash caused by strncat misuse Exploitation: remote, versus server Date: 12 May 2006 Author: Luigi Auriemma e-mail:...

Joomla! 1.0.7 / Mambo 4.5.3 - 'feed' Full Path Disclosure / Denial of Service

Mambo/Joomla Remote DOS Exploit Mambo/Joomla Path Disclosure & IIS Server-isapi mod Remote Denial Of Service by trueend5 Computer Security Science Researchers Institute KAPDA hostname ex: www.sitename.com f...

Update Protection against SHOUTcast Format String Vulnerability

SHOUTcast is Nullsoft's streaming audio system for Linux and Microsoft Windows platforms. A format string vulnerability was reported in SHOUTcast. A malicious attacker with the ability to send a formatted URL request to the SHOUTcast server may be able to execute arbitrary code on the target syst...

DEBIAN-CVE-2006-1354

Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service server crash via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module...

freeradius -- EAP-MSCHAPv2 Authentication Bypass

Freeradius Security Contact reports: Insufficient input validation was being done in the EAP-MSCHAPv2 state machine. A malicious attacker could manipulate their EAP-MSCHAPv2 client state machine to potentially convince the server to bypass authentication checks. This bypassing could also result i...

DSA-994-1 freeciv - denial of service

Bulletin has no description...

Kerio MailServer IMAP mail server DoS

Crash on IMAP Login command like a001 LOGIN 4294967294...

CVE-2006-1159

CVE-2006-1159 describes a format string vulnerability in Easy File Sharing (EFS) Web Server 3.2. The issue allows remote attackers to trigger a denial of service (server crash) and potentially execute arbitrary code via format string specifiers in the query string argument of an HTTP GET request....

CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

Design/Logic Flaw

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

Multiple vulnerabilities in Liero Xtreme 0.62b

Luigi Auriemma Application: Liero Xtreme http://lieroxtreme.thegaminguniverse.com Versions: = 0.62b Platforms: Windows Bugs: A server crash/freeze B format string in the visualization function Exploitation: A remote, versus server B local/remote, versus clients Date: 06 Mar 2006 Author: Luigi...

Cube 2005_08_29 - Multiple Buffer Overflow Crash

Cube 20050829 - Multiple Buffer Overflow Crash / by Luigi Auriemma You NEED Enet for compiling this tool then remember -lenet http://enet.bespin.org / http://enet.cubik.org / include include include include define VER "0.1" define PORT 28765 define MAXTRANS 5000 define BOFSZ MAXTRANS + 2400 defin...

Sof-PunkBuster.txt

Luigi Auriemma Application: Soldier of Fortune II with PunkBuster enabled http://www.ravensoft.com/soldier2.html http://www.PunkBuster.com Versions: PB for server = 1.180 Platforms: Windows, Linux and Mac Bug: format string Exploitation: remote, versus server in-game Date: 16 Feb 2006 Author: Lui...

CVE-2006-0771

Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly...

Kadu instant messaging client DoS

Large number of image send requests causes client to crash and server not to accept any messages from this client...

CVE-2006-0678

PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service server crash via a crafted SET SESSION AUTHORIZATION command, a different vulnerability than CVE-2006-0553...