asg-sentry 7.0.0 - Multiple Vulnerabilities

asg-sentry 7.0.0 - Multiple Vulnerabilities Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: From vendor's website: "The ASG-Sentry family of products is a suite of tools strategically engineered to control, monitor, manage, and enhance your network. Sentry's tools provi...

asg-sentry 7.0.0 - Multiple Vulnerabilities

Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: From vendor's website: "The ASG-Sentry family of products is a suite of tools strategically engineered to control, monitor, manage, and enhance your network. Sentry's tools provide you with full visibility to your network...

ASG-Sentry <= 7.0.0 Multiple Remote Vulnerabilities

Exploit for multiple platform in category dos / poc =================================================== ASG-Sentry From vendor's website: "The ASG-Sentry family of products is a suite of tools strategically engineered to control, monitor, manage, and enhance your network. Sentry's tools provide y...

Double free

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service daemon termination via 1 a large vector value, which raises a "vector too long" exception; or 2 a certain packet that raises an...

CVE-2008-0620

SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service crash via a 0x53 LPD command, which causes the server to terminate...

Socket termination in FTP Log Server 7.9.14.0

Luigi Auriemma Application: FTP Log Server http://www.wsftp.com Versions: = 7.9.14.0 Platforms: Windows Bug: socket termination Exploitation: remote Date: 04 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1...

Pragma TelnetServer空指针引用拒绝服务漏洞

BUGTRAQ ID: 27143 Pragma TelnetServer是一款远程访问和控制Telnet服务器。 Pragma TelnetServer处理协议数据时存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 TelnetServer服务器对每个入站连接启动一个telnetd.exe进程，该进程在处理TELOPT PRAGMA LOGON telnet选项（138号）期间存在空指针引用，导致进程终止。尽管终止单个进程不会影响其他进程，但终止某些进程会导致拒绝访问服务器。 Pragma Systems TelnetServer = 7.0 Build 4 Revision 58...

Pragma TelnetServer 7.0.4.589 - NULL-Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/27143/info Pragma TelnetServer is prone to a denial-of-service vulnerability because it fails to adequately handle certain telnet options. Attackers can leverage this issue to terminate the server and cause denial-of-service conditions. This issue affects...

Pragma TelnetServer 7.0.4.589 - NULL-Pointer Dereference Denial of Service

Pragma TelnetServer 7.0.4.589 - NULL-Pointer Dereference Denial of Service source: https://www.securityfocus.com/bid/27143/info Pragma TelnetServer is prone to a denial-of-service vulnerability because it fails to adequately handle certain telnet options. Attackers can leverage this issue to...

Moderate: Red Hat Security Advisory: python security update

Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An...

Apple QuickTime heap buffer overflow vulnerability

Overview Apple QuickTime contains a buffer overflow vulnerability. If exploited, this vulnerability may allow an attacker to execute code. Description Apple QuickTime is a media player that includes a browser plugin. Color table atoms can set a list of preferred colors for displaying movieson...

GLSA-200711-08 : libpng: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200711-08 libpng: Multiple Denials of Service An off-by-one error when handling ICC profile chunks in the pngsetiCCP function was discovered CVE-2007-5266. George Cook and Jeff Phillips reported several errors in pngrtran.c, the u...

libpng: Multiple Denials of Service

Background libpng is a free ANSI C library used to process and manipulate PNG images. Description An off-by-one error when handling ICC profile chunks in the pngsetiCCP function was discovered CVE-2007-5266. George Cook and Jeff Phillips reported several errors in pngrtran.c, the use of logical...

openldap -- multiple remote denial of service vulnerabilities

BugTraq reports: OpenLDAP is prone to multiple remote denial-of-service vulnerabilities because of an incorrect NULL-termination issue and a double-free issue...

Cisco Security Advisory: Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities Document ID: 97060 Advisory ID: cisco-sa-20070711-voip http://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml Revision 1.0...

Multiple .NET Null Byte Injection Vulnerabilities

======================================================================== = Multiple .NET Null Byte Injection Vulnerabilities = = Vendor Website: = http://www.microsoft.com = = Affected Version: = .NET FrameWork v1.1 SP1 = .NET FrameWork v2.0.50727 = = Vendor Notified - October, 2006 = Public...

MS07-040: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212) (uncredentialed check)

The remote web server is running a version of the ASP.NET framework that contains multiple vulnerabilities : - A PE Loader vulnerability could allow an attacker to execute arbitrary code with the privilege of the logged-on user. - A ASP.NET NULL byte termination vulnerability could allow an...

Design/Logic Flaw

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring o...

CVE-2007-0042

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring o...

CVE-2007-0042

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring o...