CVE-2008-1227

CVE-2008-1227 concerns a stack-based buffer overflow in the silc_fingerprint() function of SILC Toolkit 1.1.5 and earlier. The vulnerability occurs via long input data, enabling a remote attacker to cause a crash or potentially execute arbitrary code. Public references across multiple advisories ...

SILC工具包silcutil.c文件栈溢出漏洞

BUGTRAQ ID: 28101 SILC工具包是用于实现SILC（Secure Internet Live Conferencing）协议的软件开发工具包。 SILC工具包的lib/silcutil/silcutil.c文件中的silcfingerprint函数存在栈溢出漏洞，如果远程攻击者向该函数提交了超长数据的话，就可能触发这个溢出，导致执行任意指令。 SILC Toolkit 1.1.6 SILC ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://silcnet.org/software/download/toolkit/...

CVE-2003-1439

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 are affected, with passwords and sessions stored in plaintext in memory. The root cause is in-memory plaintext storage, enabling local users to obtain sensitive information. The available documents do not provide further details on affect...

CVE-2003-1439

Secure Internet Live Conferencing SILC 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

Buffer overflow

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

CVE-2007-3728 affects SILC Client and SILC Toolkit via a buffer overflow in lib/silcclient/client_notify.c, exploitable by remote attackers sending NICK_CHANGE notifications. The issue exists in versions before 1.1.2 and can cause a denial of service. Mitigation: upgrade to SILC Toolkit 1.1.2 or ...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

SILC工具包和客户端NICK_CHANGE函数远程溢出漏洞

BUGTRAQ ID: 24795 SILC（Secure Internet Live Conferencing）是安全的互联网会议讨论系统，可以发送任何类型的信息，包括多媒体信息，如视频、音频、图象等等。 SILC在处理畸形格式的消息时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 SILC客户端和工具包的lib/silcclient/clientnotify.c文件没有正确地处理NICKCHANGE通知。如果攻击者更改了隧道中的别名，就可能触发缓冲区溢出，导致执行任意指令。 SILC Toolkit/Client 1.1.2...

GLSA-200703-12 : SILC Server: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200703-12 SILC Server: Denial of Service Frank Benkstein discovered a possible NULL pointer dereference in apps/silcd/command.c if a new channel is created without specifying a valid hmac or cipher algorithm name. Impact : A remot...

SILC Server: Denial of service

Background SILC Server is a server for the Secure Internet Live Conferencing SILC protocol. Description Frank Benkstein discovered a possible NULL pointer dereference in apps/silcd/command.c if a new channel is created without specifying a valid hmac or cipher algorithm name. Impact A remote...

CVE-2007-1327

The CVE-2007-1327 entry affects silc-server 1.0.2, specifically the SILC_SERVER_CMD_FUNC in apps/silcd/command.c. A remote attacker can trigger a denial of service (NULL dereference and daemon crash) by sending a request that omits a cipher algorithm and uses an invalid HMAC algorithm. The vulner...

CVE-2007-1327

The SILCSERVERCMDFUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service NULL dereference and daemon crash via a request without a cipher algorithm and an invalid HMAC algorithm...

[Full-disclosure] silc-server 1.0.2 denial-of-service vulnerability

Hi, there is a bug in the current version of silc-server that makes it possible to crash a networks SILC router or a standalone server, when a new channel is created. All it takes is to specify an invalid hmac algorithm name and no cipher algorithm name. This results in an null pointer dereferenc...

Silc Server 1.0.2 - New Channel Remote Denial of Service

Silc Server 1.0.2 - New Channel Remote Denial of Service source: https://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server,...

Silc Server 1.0.2 - New Channel Remote Denial of Service

source: https://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server, effectively denying service to legitimate users. This iss...

CVE-2005-2809

silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...

CVE-2005-2809

The CVE-2005-2809 entry concerns the silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier. A local user can overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file, indicating a symlink/race condition in the temporary file handling. Conc...

CVE-2005-2809

silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...