PT-2005-4719 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the patchday that contains the fix for this issue Description: This issue allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has...

Socket termination in Battle Carry .005

Luigi Auriemma Application: Battle Carry http://www.battlecarry.com Versions: = .005 Platforms: Windows Bug: socket termination Exploitation: remote, versus server Date: 02 Nov 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Co...

CVE-2005-3426

Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services is affected by CVE-2005-3426. The vulnerability allows remote attackers to trigger a denial of service via memory corruption during SSL session negotiation when a malformed client certificate is presented. The entry notes...

Battle Carry .005 Socket Termination - Denial of Service

Battle Carry .005 Socket Termination - Denial of Service / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char...

Battle Carry .005 Socket Termination - Denial of Service

/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...

Multiple IBM DB2 Universal Database vulnerabilities

Server crash on constant string processing in queries; endless loop on hash joins processing; multiple problems with invalid connection termination; unauthorized creation of routine based objects; array overflow on oversized number of elements in 'in' list; db2jd crash on certain clients...

[Full-disclosure] Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability ========================================================================== Document ID: 67919 Revision 1.0 For Public Release 2005 October 19...

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow (Metasploit)

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

security flaw

sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to...

BusMail_SMTPDOS.pl.txt

Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...

[Full-disclosure] Buffer overflow in BusinessMail email server system 4.60.00

Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...

CVE-2002-1942

Imatix Xitami 2.5 b5 is affected. The issue is that the product does not properly terminate certain Keep-Alive connections that have been broken or closed early, which can allow remote attackers to cause a denial of service (crash) through a large number of concurrent sessions. The vulnerability ...

Server termination in Raknet 2.33 (before 30 May 2005)

Luigi Auriemma Application: Raknet network library http://www.rakkarsoft.com Versions: = 2.33 before 30 May 2005 the bug has been introduced in some recent updates but is not known what is the exact first vulnerable version Platforms: Windows and Unix Bug: server termination and endless loop...

[Full-disclosure] Crash in Stronghold 2 1.2

Luigi Auriemma Application: Stronghold 2 http://www.stronghold2.com Versions: = 1.2 Platforms: Windows Bug: exception/crash Exploitation: remote, versus server Date: 30 May 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code 4...

CVE-2004-2069

sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to...

CVE-2005-0621

Scrapland 1.0 and earlier allows remote attackers to cause a denial of service server termination by triggering an error, which is treated as a fatal error by the server, as demonstrated using 1 signed integers for size values, 2 an invalid model, 3 a "newpos" value that is less than or equal to ...

Scrapland <= 1.0 Server Termination Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= Scrapland include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...

Scrapland 1.0 - Server Termination Denial of Service

Scrapland 1.0 - Server Termination Denial of Service / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...

[Full-Disclosure] Server termination in Scrapland 1.0

Luigi Auriemma Application: Scrapland http://www.scrapland.com Versions: = 1.0 Platforms: Windows Bug: server termination Exploitation: remote, versus server partially in-game Date: 28 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

Scrapland 1.0 - Server Termination Denial of Service

/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...