Cherokee: Format string vulnerability

Background Cherokee is an extra-light web server. Description Florian Schilhabel from the Gentoo Linux Security Audit Team found a format string vulnerability in the cherokeeloggerncsawritestring function. Impact Using a specially crafted URL when authenticating via authpam, a malicious user may ...

Caudium 1.x - Remote Denial of Service

Caudium 1.x - Remote Denial of Service source: https://www.securityfocus.com/bid/11567/info Caudium is reported prone to a remote denial of service vulnerability. Remote attackers may exploit this vulnerability to crash affected Web servers, denying service to legitimate users. Versions of Caudiu...

quake2 -- multiple critical vulnerabilities

An advisory published by Richard Stanway describes numerous critical vulnerabilities in the Quake II engine: Due to unchecked input at various stages in the server, remote users are able to cause the server to crash, reveal sensitive information or potentially execute arbitrary code...

Quick 'n EasY 2.4 FTP Server - Remote Denial of Service

!/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is viewed or just at the time it will be viewed.This sploi...

CVE-2004-0799

The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service server crash via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm"...

CVE-2004-0938

CVE-2004-0938 affects FreeRADIUS prior to 1.0.1. The issue arises when processing certain RADIUS messages (out-of-sequence/out-of-order handling and specifically an Ascend-Send-Secret attribute without the required leading packet), which can trigger a memory exception and cause a denial of servic...

CVE-2004-0938

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...

UPDATE: Format String Vulnerability in Valve's CS-Source

In-Reply-To: [email protected] Hi, i just found out, that u can also use it remotely against the server without any knowledge of the rcon-password! just do the following: type 'name "n"' without ' to console and wait until you get killed. The server will be killed,...

MS04-030: WebDAV XML Message Handler Denial of Service (824151)

The remote host is running a version of Windows and IIS that is vulnerable to a remote denial of service attack through the WebDAV XML Message Handler. An attacker may exploit this flaw to prevent the remote web server from working properly. C Tenable Network Security, Inc. include"compat.inc"; i...

Server crash in Flash Messaging 5.2.0g

Luigi Auriemma Application: Flash Messaging http://www.flashmessage.com Versions: = 5.2.0g rev 1.1.2 Platforms: Windows Bugs: - server crash - unkickable clients Exploitation: remote, versus server Date: 07 October 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service

source: https://www.securityfocus.com/bid/11351/info Flash Messaging server is reported prone to a remote denial of service vulnerability. This issue arises due to the inability of the server to handle exceptional conditions properly. A remote attacker may cause a vulnerable server to crash,...

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service source: https://www.securityfocus.com/bid/11351/info Flash Messaging server is reported prone to a remote denial of service vulnerability. This issue arises due to the inability of the server to handle exceptional conditions...

In-game format string in Judge Dredd vs. Death 1.01

Luigi Auriemma Application: Judge Dredd: Dredd vs. Death http://www.dreddvsdeath.com Versions: = 1.01 Platforms: Windows Bug: format string Exploitation: remote, versus server in-game Date: 02 October 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Microsoft SQL Server 7.0 - Remote Denial of Service (1)

// source: https://www.securityfocus.com/bid/11265/info Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications. An attacker may leverage this issue to cause the affected...

Microsoft SQL Server 7.0 - Remote Denial of Service (1)

Microsoft SQL Server 7.0 - Remote Denial of Service 1 // source: https://www.securityfocus.com/bid/11265/info Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications. An...

Microsoft SQL Server 7.0 - Remote Denial of Service (2)

Microsoft SQL Server 7.0 - Remote Denial of Service 2 // source: https://www.securityfocus.com/bid/11265/info Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications. An...

Multiple vulnerabilities in ActivePost Standard 3.1

Luigi Auriemma Application: ActivePost Standard http://www.activepost.net Versions: = 3.1 Platforms: Windows Bugs: - File-Server crash - File-server directory traversal and path disclosure - conference password disclosure Risk: critical Exploitation: remote, versus server only the third bug affec...

jabberd DoS

Server crashes on UTF8 data...

MDaemon Webconfig IMAP Malformed URL DoS

The remote host is running the MDaemon IMAP server. It is possible to crash the remote version of this software sending a long argument to the 'LOGIN' command. This problem allows an attacker to make the remote service crash, thus preventing legitimate users from receiving emails. C Tenable Netwo...

jabberd 1.x: Denial of Service vulnerability

Background Jabber is a set of streaming XML protocols enabling message, presence, and other structured information exchange between two hosts. jabberd is the original implementation of the Jabber protocol server. Description Jose Antonio Calvo found a defect in routines handling XML parsing of...