GLSA-200505-09 : Gaim: Denial of Service and buffer overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200505-09 Gaim: Denial of Service and buffer overflow vulnerabilities Stu Tomlinson discovered that Gaim is vulnerable to a remote stack based buffer overflow when receiving messages in certain protocols, like Jabber and SILC, wit...

GLSA-200505-08 : HT Editor: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200505-08 HT Editor: Multiple buffer overflows Tavis Ormandy of the Gentoo Linux Security Team discovered an integer overflow in the ELF parser, leading to a heap-based buffer overflow. The vendor has reported that an unrelated...

PT-2005-1103 · Dan Bernstein +2 · Qmail +2

Name of the Vulnerable Software and Affected Versions: qmail affected versions not specified Description: The issue is caused by an integer overflow in the stralloc readyplus function in qmail. This allows remote attackers to cause a denial of service and possibly execute arbitrary code via a lar...

Neslo Desktop Rover Remote DoS Vulnerability

Title: Neslo Desktop Rover Remote DoS Vulnerability Vendor Homepage: http://www.nelsosoftware.com Discovered by: Adam Baldwin [email protected] www.evilpacket.netadvisoriesEP-000-0003.html April 19, 2005 I. INTRODUCTION Desktop Rover is a software application for Microsoft Windows that...

Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages Denial of Service (MS05-019)

/ HOD-icmp-attacks-poc.c: 2005-04-15: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-019 CISCO:20050412 ICMP attacks against TCP Proof-of-Concept .:: houseofdabus ::. for more details: http://www.livejournal.com/users/houseofdabus...

[Full-Disclosure] iDEFENSE Security Advisory 07.09.04: wvWare Library Buffer Overflow Vulnerability

wvWare Library Buffer Overflow Vulnerability iDEFENSE Security Advisory 07.09.04 www.idefense.com/application/poi/display?id=115&type=vulnerabilities July 09, 2004 I. BACKGROUND Caoln McNamara and Dom Lachowicz's wvWare is a library used to load and parse Microsoft Word files on unix-based system...

Microsoft Windows SSL Library Denial of Service Vulnerability

Description Microsoft Windows SSL library is reported to be prone to a denial of service vulnerability. It has been reported that an attacker could trigger this issue by sending a specially crafted TCP message that causes the protocol to fail resulting in a denial of service. Successful...

Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing

Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing ------ Risk: POTENTIALLY HIGH. Potentially allowing any possible action on the client machine, including reading any file, placing Trojan code or altering data. The risk depends on the security settings in the 'Intranet zone'...

Trend Micro Interscan VirusWall for Windows NT 3.51 - Configurations Modification

source: https://www.securityfocus.com/bid/2859/info A remote user could utilize the administrator functions of Interscan Viruswall without providing authentication credentials. This may allow the user to make configuration changes when submitting specially crafted URLs to the host...

Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure

source: https://www.securityfocus.com/bid/2788/info Submitting a specially crafted GET request for a known file .php, .pl, or .shtml, could cause OmniHTTPD to disclose the source code of the requested resource. The GET requested would have to be appended with the Unicode equivalent of a space...

Working Resources BadBlue 1.2.7 - Denial of Service

Working Resources BadBlue 1.2.7 - Denial of Service source: https://www.securityfocus.com/bid/2392/info It is possible for a remote user to cause a denial of service condition in Working Resources BadBlue. Requesting a specially crafted URL composed of 284 or more bytes, will cause the server to...

ROS-2-1222

2.1222 Vulnerability in Git CVE-2020-11008, CVE-2020-5260 1. Vulnerability Description: Vulnerability in Git. The vulnerability affects the "credential.helper" handlers and is exploited when a specially crafted URL containing a newline character, an empty host, or an unspecified request scheme is...

Security update 1970-01-01

...

Security Update For Exchange Server 2016 CU15 (KB4540123)

A cross-site-scripting XSS vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server...

Security Update for SQL Server 2014 Service Pack 2 CU (KB4505419)

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could execute code in the context of the SQL Server Database Engine service account. To exploit the...