CheckPoint Secure Platform Multiple Buffer Overflows

Hi all, we have published a paper about CheckPoint Firewall-1 vulnerabilities. The platform tested is the Secure Platform R60. We have found many buffer overflows. Most of them are located in command line utilities that can be exploited locally. A very few of them maybe can be exploited remotely,...

CVE-2007-4647

newswire/uploadmedia.cgi in 2coolcode Our Space Ourspace 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi...

CVE-2007-4647

newswire/uploadmedia.cgi in 2coolcode Our Space Ourspace 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi...

CVE-2007-4647

CVE-2007-4647 affects 2coolcode Our Space (Ourspace) 2.0.9. The issue is in uploadmedia.cgi, where unrestricted upload functionality allows remote attackers to upload certain files via unspecified vectors. The root cause is not clearly detailed beyond “unrestricted functionality in uploadmedia.cg...

CVE-2007-4647: Undefined Security Weakness

newswire/uploadmedia.cgi in 2coolcode Our Space Ourspace 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi...

Diskeeper 9 Remote Memory Disclosure Exploit

No description provided by source. / Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function...

Buffer overflow

Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID 1 0x80 or 2 0x88 to UDP port 34297, related to the buffer containing the server version number...

CVE-2007-4444

Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID 1 0x80 or 2 0x88 to UDP port 34297, related to the buffer containing the server version number...

CVE-2007-4445

Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service daemon crash via 1 an ID 0x30 packet, 2 an ID 0x38 packet, and an invalid 13-bit integer in 3 an ID 0x60 packet and 4 an ID 0x68 packet; and a denial of service UDP port block via 5 an ID 0x20 packet and 6 ...

CVE-2007-4444

Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID 1 0x80 or 2 0x88 to UDP port 34297, related to the buffer containing the server version number...

CVE-2007-4445

Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service daemon crash via 1 an ID 0x30 packet, 2 an ID 0x38 packet, and an invalid 13-bit integer in 3 an ID 0x60 packet and 4 an ID 0x68 packet; and a denial of service UDP port block via 5 an ID 0x20 packet and 6 ...

CVE-2007-4444

CVE-2007-4444 involves multiple buffer overflows in Image Space rFactor 1.250 and earlier. The issue allows remote attackers to execute arbitrary code by sending a UDP packet to port 34297 with ID 0x80 or 0x88, related to the buffer containing the server version number. Affected software: Image S...

CVE-2007-4445

CVE-2007-4445 affects Image Space rFactor 1.250 and earlier. The vulnerability allows remote attackers to cause a denial of service via crafted UDP/UDP-like packets: (1) ID 0x30, (2) ID 0x38, and an invalid 13-bit integer in (3) ID 0x60 and (4) ID 0x68 packets, leading to a daemon crash; and a se...

CVE-2007-4444: Undefined Security Weakness

Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID 1 0x80 or 2 0x88 to UDP port 34297, related to the buffer containing the server version number...

CVE-2007-4445: Undefined Security Weakness

Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service daemon crash via 1 an ID 0x30 packet, 2 an ID 0x38 packet, and an invalid 13-bit integer in 3 an ID 0x60 packet and 4 an ID 0x68 packet; and a denial of service UDP port block via 5 an ID 0x20 packet and 6 ...

Remote Memory Read in Diskeeper 9 - 2007

Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...

Diskeeper 9 Remote Memory Disclosure Exploit

Exploit for unknown platform in category remote exploits ============================================ Diskeeper 9 Remote Memory Disclosure Exploit ============================================ / Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for...

Diskeeper 9 - Remote Memory Disclosure

/ Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...

Cisco routers IOS IPv6 information leakage

IPv6 header contains 16 bytes of non-initialized memory from router's address space...

Moderate: Red Hat Security Advisory: libgtop2 security update

An updated libgtop2 package that fixes a security issue and a functionality bug is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libgtop2 package contains a library for obtaining information...