[Full-disclosure] silc-server 1.0.2 denial-of-service vulnerability

Hi, there is a bug in the current version of silc-server that makes it possible to crash a networks SILC router or a standalone server, when a new channel is created. All it takes is to specify an invalid hmac algorithm name and no cipher algorithm name. This results in an null pointer dereferenc...

Silc Server 1.0.2 - New Channel Remote Denial of Service

Silc Server 1.0.2 - New Channel Remote Denial of Service source: https://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server,...

Silc Server 1.0.2 - New Channel Remote Denial of Service

source: https://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server, effectively denying service to legitimate users. This iss...

silc server and toolkit insecure temporary file creation

silc server and toolkit insecure temporary file creation Vendor: http://silcnet.org/ Advisory: http://www.zataz.net/adviso/silc-server-toolkit-06152005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created...