Foxweb foxweb.exe / foxweb.dll Long URL Remote Overflow

The foxweb.dll or foxweb.exe CGI is installed. Versions 2.5 and below of this CGI program have a remote stack buffer overflow. A remote attacker could use this to crash the web server, or possibly execute arbitrary code. Since Nessus just verified the presence of the CGI but could not check the...

Webweaver DoS

Large number of data in GET request causes server to crash...

IRCnet IRCD 2.10 - Local Buffer Overflow

IRCnet IRCD 2.10 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the...

IRCnet IRCD 2.10 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the nature of this vulnerability it has been...

OpenSSL ASN.1 0.9.6j0.9.7b - Brute Forcer for Parsing Bugs

OpenSSL ASN.1 0.9.6j0.9.7b - Brute Forcer for Parsing Bugs / Brute forcer for OpenSSL ASN.1 parsing bugs include include include include include include include include include include include include include include char buf8192; / This was simply sniffed from an stunnel session / const char...

Brute forcer for OpenSSL ASN.1 parsing bugs (<=0.9.6j <=0.9.7b)

No description provided by source. / Brute forcer for OpenSSL ASN.1 parsing bugs =0.9.6j =0.9.7b written by Bram Matthys Syzop on Oct 9 2003. This program sends corrupt client certificates to the SSL server which will 1 crash it 2 create lots of error messages, and/or 3 result in other...

OpenSSL ASN.1 < 0.9.6j/0.9.7b - Brute Forcer for Parsing Bugs

/ Brute forcer for OpenSSL ASN.1 parsing bugs include include include include include include include include include include include include include include char buf8192; / This was simply sniffed from an stunnel session / const char dacrap =...

Medieval Total War &lt;= 1.1 broadcast crash

Luigi Auriemma Application: Medieval Total War http://www.totalwar.com Versions: = 1.1 Platforms: Windows Bug: Remote crash of server and attached clients caused by long nickname Risk: Low/Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction...

Medieval Total War 1.01.1 - nickname Denial of Service

Medieval Total War 1.01.1 - nickname Denial of Service source: https://www.securityfocus.com/bid/8787/info It has been reported that Medieval Total War may be prone to a denial of service vulnerability. The issue is caused when an attacker sends a malformed value for nickname consisting of 0...

Medieval Total War 1.0/1.1 - nickname Denial of Service

source: https://www.securityfocus.com/bid/8787/info It has been reported that Medieval Total War may be prone to a denial of service vulnerability. The issue is caused when an attacker sends a malformed value for nickname consisting of 0 Unicode characters to the server during the initial...

Multiple vulnerabilities in WinShadow

Multiple vulnerabilities in WinShadow ------------------------------------- Affected Systems: OmniCom WinShadow version: 2.0 and possibly earlier versions Vendor: OmniCom Technologies - http://www.omnicomtech.com Issue: 1. Buffer overflow in client handling hostnames in host files 2. DoS against...

Meteor FTP Server 1.21.5 - USER Memory Corruption

Meteor FTP Server 1.21.5 - USER Memory Corruption source: https://www.securityfocus.com/bid/8376/info Meteor FTP Server is prone to a memory corruption vulnerability that can be triggered by a malicious client via an overly value for the FTP USER command. This could be exploited to cause a server...

Meteor FTP Server 1.2/1.5 - USER Memory Corruption

source: https://www.securityfocus.com/bid/8376/info Meteor FTP Server is prone to a memory corruption vulnerability that can be triggered by a malicious client via an overly value for the FTP USER command. This could be exploited to cause a server crash. Further reports indicate that this may...

Novell Netware Enterprise Web Server 5.16.0 - CGI2Perl.NLM Buffer Overflow (PoC)

Novell Netware Enterprise Web Server 5.16.0 - CGI2Perl.NLM Buffer Overflow PoC source: https://www.securityfocus.com/bid/8251/info Novell Netware Enterprise Web Server cgi2perl.nlm has been reported prone to a buffer overflow vulnerability. The issue presents itself, likely due to insufficient...

StarSiege: Tribes DoS

Invalid UDP packet causes game server to crash...

wzdftpd remote DoS

Title: wzdftpd remote DoS Affected: wzdftpd = 0.1rc4 URL: http://www.wzdftpd.net Risk: High Exploitable: Yes Remote: Yes Date: June, 27 2003 Overview: "A portable, modular and efficient ftp server, supporting SSL, winsock, multithreaded, modules ,externals scripts. unix-like permissions+acls,...

Myserver 0.4.1 DOS..

hi... Topic: MyServer 0.4.1 DOS Product: Myserver 0.4.1 http://myserverweb.sourceforge.net Note: yep, I'm on the dole, anyone wanna give me a job : Vendor Notification: Woooops, sorry i forgot ; Background: from homepage MyServer is a free and easy to configure web server. MyServer is licensed...

EnceladusServerSuite3.9.11.txt

Enceladus Server suite 3.9.11 Release Date: ------------- June 15,2003 Severity --------- HighRemote crash-code execution Systems Affected: ----------------- Enceladus Server Suite 3.9.11 possibly all the older versions are vulnerable Description: Enceladus Server Suite is a package that contains...

Proxomitron Proxy Server - GET Remote Denial of Service

source: https://www.securityfocus.com/bid/7954/info It has been reported that Proxomitron does not properly handle some string types. Because of this, an attacker can cause the server to become unstable and crash. GET /../..0%%../ 4504 chars GET ......\ 4504 chars...

Buffer overflow in Mini HTTP Server

ZUD SECURITY TEAM PRESENT bug found by nimber www.zudteam.org Application: Mini HTTP Server. Versions: 1.0 Platform: Win95/98/NT Web Site: http://www.userworld.com/users/hlingso/remote.htm Bug: Buffer overflow. Crash server by sending long http request. Examples: www.server.ru/AAAAAAAAAAAAmore 78...