8380 matches found
CVE-2001-1579: Undefined Security Weakness
The timed program in.timed in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service...
[Full-disclosure] Buffer overflow in BusinessMail email server system 4.60.00
Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...
CVE-2002-1942
Imatix Xitami 2.5 b5 is affected. The issue is that the product does not properly terminate certain Keep-Alive connections that have been broken or closed early, which can allow remote attackers to cause a denial of service (crash) through a large number of concurrent sessions. The vulnerability ...
Server termination in Raknet 2.33 (before 30 May 2005)
Luigi Auriemma Application: Raknet network library http://www.rakkarsoft.com Versions: = 2.33 before 30 May 2005 the bug has been introduced in some recent updates but is not known what is the exact first vulnerable version Platforms: Windows and Unix Bug: server termination and endless loop...
[Full-disclosure] Crash in Stronghold 2 1.2
Luigi Auriemma Application: Stronghold 2 http://www.stronghold2.com Versions: = 1.2 Platforms: Windows Bug: exception/crash Exploitation: remote, versus server Date: 30 May 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code 4...
CVE-2004-2069
sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to...
CVE-2005-0621
Scrapland 1.0 and earlier allows remote attackers to cause a denial of service server termination by triggering an error, which is treated as a fatal error by the server, as demonstrated using 1 signed integers for size values, 2 an invalid model, 3 a "newpos" value that is less than or equal to ...
CVE-2002-1603: Undefined Security Weakness
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f encoded /, %20 encoded space, or %00 encoded null character, which returns the ASP source code unparsed...
CVE-2005-0621: Undefined Security Weakness
Scrapland 1.0 and earlier allows remote attackers to cause a denial of service server termination by triggering an error, which is treated as a fatal error by the server, as demonstrated using 1 signed integers for size values, 2 an invalid model, 3 a "newpos" value that is less than or equal to ...
Scrapland <= 1.0 Server Termination Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================= Scrapland include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...
Scrapland 1.0 - Server Termination Denial of Service
Scrapland 1.0 - Server Termination Denial of Service / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...
[Full-Disclosure] Server termination in Scrapland 1.0
Luigi Auriemma Application: Scrapland http://www.scrapland.com Versions: = 1.0 Platforms: Windows Bug: server termination Exploitation: remote, versus server partially in-game Date: 28 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...
Scrapland 1.0 - Server Termination Denial of Service
/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...
CVE-2005-0279: Undefined Security Weakness
Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote attackers to cause a denial of service socket termination via a long UDP packet...
bind9 -- denial of service
Problem description A DNSSEC-related validator function in BIND 9.3.0 contains an inappropriate internal consistency test. When this test is triggered, named8 will exit. Impact On systems with DNSSEC enabled, a remote attacker may be able to inject a specially crafted packet that will cause the...
Socket termination, format string and XSS in Soldner Secret Wars 30830
Luigi Auriemma Application: SLDNER - Secret Wars http://www.secretwars.net Versions: = 30830 Platforms: Windows Bugs: A silent socket termination B in-game format string C in-game cross site scripting versus admin Exploitation: remote, versus server B and C are in-game bugs Date: 04 Jan 2005...
DEBIAN-CVE-2004-2069
sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to...
PT-2004-2965 · Openbsd +2 · Openssh +2
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 3.6.1p2 and 3.7.1p2 Description: The issue occurs in the sshd.c component of OpenSSH when using privilege separation. It does not properly signal the non-privileged process when a session has been terminated after exceeding t...