CVE-2008-1227

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

SILC工具包silcutil.c文件栈溢出漏洞

BUGTRAQ ID: 28101 SILC工具包是用于实现SILC（Secure Internet Live Conferencing）协议的软件开发工具包。 SILC工具包的lib/silcutil/silcutil.c文件中的silcfingerprint函数存在栈溢出漏洞，如果远程攻击者向该函数提交了超长数据的话，就可能触发这个溢出，导致执行任意指令。 SILC Toolkit 1.1.6 SILC ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://silcnet.org/software/download/toolkit/...

CVE-2003-1439

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 are affected, with passwords and sessions stored in plaintext in memory. The root cause is in-memory plaintext storage, enabling local users to obtain sensitive information. The available documents do not provide further details on affect...

CVE-2003-1439

Secure Internet Live Conferencing SILC 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information...

Buffer overflow

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

CVE-2007-3728 affects SILC Client and SILC Toolkit via a buffer overflow in lib/silcclient/client_notify.c, exploitable by remote attackers sending NICK_CHANGE notifications. The issue exists in versions before 1.1.2 and can cause a denial of service. Mitigation: upgrade to SILC Toolkit 1.1.2 or ...

SILC工具包和客户端NICK_CHANGE函数远程溢出漏洞

BUGTRAQ ID: 24795 SILC（Secure Internet Live Conferencing）是安全的互联网会议讨论系统，可以发送任何类型的信息，包括多媒体信息，如视频、音频、图象等等。 SILC在处理畸形格式的消息时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 SILC客户端和工具包的lib/silcclient/clientnotify.c文件没有正确地处理NICKCHANGE通知。如果攻击者更改了隧道中的别名，就可能触发缓冲区溢出，导致执行任意指令。 SILC Toolkit/Client 1.1.2...

GLSA-200703-12 : SILC Server: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200703-12 SILC Server: Denial of Service Frank Benkstein discovered a possible NULL pointer dereference in apps/silcd/command.c if a new channel is created without specifying a valid hmac or cipher algorithm name. Impact : A remot...

SILC Server: Denial of service

Background SILC Server is a server for the Secure Internet Live Conferencing SILC protocol. Description Frank Benkstein discovered a possible NULL pointer dereference in apps/silcd/command.c if a new channel is created without specifying a valid hmac or cipher algorithm name. Impact A remote...

CVE-2007-1327

The SILCSERVERCMDFUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service NULL dereference and daemon crash via a request without a cipher algorithm and an invalid HMAC algorithm...

CVE-2007-1327

The CVE-2007-1327 entry affects silc-server 1.0.2, specifically the SILC_SERVER_CMD_FUNC in apps/silcd/command.c. A remote attacker can trigger a denial of service (NULL dereference and daemon crash) by sending a request that omits a cipher algorithm and uses an invalid HMAC algorithm. The vulner...

[Full-disclosure] silc-server 1.0.2 denial-of-service vulnerability

Hi, there is a bug in the current version of silc-server that makes it possible to crash a networks SILC router or a standalone server, when a new channel is created. All it takes is to specify an invalid hmac algorithm name and no cipher algorithm name. This results in an null pointer dereferenc...

Silc Server 1.0.2 - New Channel Remote Denial of Service

Silc Server 1.0.2 - New Channel Remote Denial of Service source: https://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server,...

Silc Server 1.0.2 - New Channel Remote Denial of Service

source: https://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server, effectively denying service to legitimate users. This iss...

CVE-2005-2809

silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...

CVE-2005-2809

The CVE-2005-2809 entry concerns the silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier. A local user can overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file, indicating a symlink/race condition in the temporary file handling. Conc...

CVE-2005-2809

silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...