Titan FTP Server DoS

User disconnection before LIST command completition causes server to crash...

servuLIST.txt

Serv-U LIST -l Parameter Buffer Overflow ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5ZP0G2KCKA.html SUMMARY Serv-U is a "powerful, easy-to-use, award-winning FTP server" created by Rob Beckers. A vulnerabili...

Titan FTP Server 3.0 - LIST Denial of Service

Titan FTP Server 3.0 - LIST Denial of Service source: https://www.securityfocus.com/bid/10272/info Titan FTP is prone to a remote denial of service vulnerability when handling the 'LIST' command. A remote attacker can cause the FTP server to crash by improperly handling a non-existent socket...

Fastream NETFile DoS

Server crashes on unknown FTP username/password...

Scorched 3D server chat box format string vulnerability

Background Scorched 3D is a game based loosely on the classic DOS game "Scorched Earth". Scorched 3D adds amongst other new features a 3D island environment and LAN and internet play. Scorched 3D is totally free and is available for multiple operating systems. Description Scorched 3D build 36.2 a...

Crackalaka IRC Server 1.0.8 - Remote Denial of Service

Crackalaka IRC Server 1.0.8 - Remote Denial of Service source: https://www.securityfocus.com/bid/10092/info It has been reported that Crackalaka may be prone to a remote denial of service vulnerability that may allow an attacker to crash the server by sending an excessive amount of data. Crackala...

crackalaka DoS

Random data to TCP/6667 cause server to crash...

Crackalaka IRC Server 1.0.8 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10092/info It has been reported that Crackalaka may be prone to a remote denial of service vulnerability that may allow an attacker to crash the server by sending an excessive amount of data. Crackalaka version 1.0.8 is reported to be prone to this issue,...

ADA IMGSVR 0.4 - Arbitrary File Download

source: https://www.securityfocus.com/bid/10027/info A vulnerability has been reported in the ImgSvr server software that may allow a remote user to the retrieve arbitrary files from the web server root directory and any subdirectories therein. An attacker may leverage this issue to gain access t...

[ GLSA 200403-08 ] oftpd DoS vulnerability

Gentoo Linux Security Advisory GLSA 200403-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

OpenLDAP DoS Vulnerability

Background OpenLDAP is a suite of LDAP-related application and development tools. It includes slapd the standalone LDAP server, slurpd the standalone LDAP replication server, and various LDAP libraries, utilities and example clients. Description A password extended operation password EXOP which...

oftpd DoS vulnerability

Background Quote from http://www.time-travellers .org/oftpd/ "oftpd is designed to be as secure as an anonymous FTP server can possibly be. It runs as non-root for most of the time, and uses the Unix chroot command to hide most of the systems directories from external users - they cannot change...

mysql -- FTS request denial of service vulnerability

A special crafted MySQL FTS request can cause the server to crash. Malicious MySQL users can abuse this bug in a denial of service attack against systems running an affected MySQL daemon. Note that because this bug is related to the parsing of requests, it may happen that this bug is triggered...

Chrome 1.2.0.0 server crash

Luigi Auriemma Application: Chrome http://www.chromethegame.com Versions: = 1.2.0.0 Platforms: Windows Bug: reading and writing into unallocated memory crash Risk: medium/high Exploitation: remote, versus server Date: 18 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

wMCam DoS

Connection flood causes server to crash...

Epic Games Unreal Tournament Server 436.0 - Engine Remote Format String

source: https://www.securityfocus.com/bid/9840/info A format string vulnerability has been reported to exists in the Unreal Tournament server engine. This issue is due to a failure of the server application to properly sanitize user supplied network data. Ultimately this vulnerability could allow...

Desert Rats vs. Afrika Korps (Haegemonia bug)

Yesterday has been released the multiplayer demo 1.18 of the game Desert Rats vs. Afrika Korps http://www.desertratsgame.com. Also this game as Haegemonia created by the same developers is vulnerable to the same server crash bug. I have updated the advisory and proof-of-concept I released ten day...

oftpd denial-of-service vulnerability (PORT command)

Philippe Oechslin reported a denial-of-service vulnerability in oftpd. The oftpd server can be crashed by sending a PORT command containing an integer over 8 bits long over 255...

Denial Of Service in FreeChat 1.1.1a

Donato Ferrante Application: FreeChat http://sourceforge.net/projects/vbfreechat/ Version: 1.1.1a Bug: Denial Of Service Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. T...

Digital Reality Game Engine 1.0.x - Remote Denial of Service

// source: https://www.securityfocus.com/bid/9736/info It has been reported that the Digital Reality Game engine is prone to a remote denial of service vulnerability. This issue is due to a failure of the application to validate packet data size input supplied by a client. The immediate...