7505 matches found
isc-dhcpd.exploit.txt
Somebody at OpenBSD discovered a possible root exploit in the ISC DHCP client. I can confirm that as of 6:23am on June 23rd after several hours of hacking around the sources I had the following dhcpd config running on my own machine's private network for testing: shared-network LOCAL-NET option...
Linux news 25.05.00
Ядро 2.3.99-pre9 Вышел новый пререлиз нестабильного ядра 2.3.99. Изменения в основном затронули MIPS платформу. Подробнее: http://www.kernel.org/ DoS в XFree 3.3.5 и больше Ошибка, благодаря которой возможно проведение DoS атаки, обнаружена в XFree 3.3.5, 3.3.6 и 4.0. Атака приводит к использован...
RFP2K05: NetProwler vs. RFProwler
---/ RFP2K05 /----------------------------/ rfp.labs / wiretrip /--------- NetProwler vs. RFProwler Remote denial of service in Axent NetProwler ------------------------------------/ rain forest puppy / [email protected] Table of contents: -/ 1 / For the Black Hats -/ 2 / For the White Hats -/ 3 /...
ADV-150400.txt
------- Legion2000 - Russian Security Team ADV-1504001 ------- www.legion2000.cc ---- INFORMATION ---- Program Name : CERN Image Map Dispatcher Discovered By : Narrow [email protected] --------------------- Problem Description CERN Image Map Dispatcher /cgi-bin/htimage.exe comes by default with...
New DOS on Interscan NT/3.32
One month ago, during a audit, we found a new remote DOS on TrendMicro Interscan for NT last version V3.32, build 1011 and 1022. Last October, USSR Labs found a buffer overflow in HELO command, and wrote a very nice exploit with shell code, giving SYSTEM shell access to remote attacker. Trendmicr...
WFTPD 2.34/2.40/3.0 - Remote Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/747/info WFTPD is reported prone to a remote buffer overflow vulnerability. The issue exists due to a lack of sufficient bounds checking performed on MKD and CWD arguments. It is reported that superfluous data passed to MKD first and then to CWD results i...
Netscape Messaging Server 3.63.543.55 - RCPT TO Denial of Service
Netscape Messaging Server 3.63.543.55 - RCPT TO Denial of Service // source: https://www.securityfocus.com/bid/748/info Netscape Messaging server will not de-allocate memory that is used to store the RCPT TO information for an incoming email. By sending enough long RCPT TO addresses, the system c...
unsetenv.txt
o unsetenv off-by-one error: The unsetenv function in glibc 2.1.1 suffers from a problem whereby when running through the environment variables, if the name of the variable being unset is present twice consecutively, the second is not destroyed. unsetenv is sometimes used by programs that depend ...
netscape4.x_bof.txt
Subject: Re: Netscape communicator 4.06J, 4.5J-4.6J, 4.61e Buffer Overflow To: [email protected] Hello David Parker$B!!Bwrites: I tried the 4 exploit test links, and they all crashed Netscape but didn't cause any bluescreens or run any programs. I have win98, Netscape 4.5 128-bit, and the...
oracle8-tnslsnr-DoS.txt
Oracle8 TNSLSNR DoS Jason Ackley [email protected] Mon, 28 Dec 1998 16:21:20 -0800 Greetings, I hope everyone had happy holidays with the IOS and Sun bugs, but now its time to get back to business.. Ohhh OK, one more DoS ! : Hopefully this is new, I searched the archives for 'tns' and 'oracle', bu...
ascend.multilink.ppp.txt
Date: Wed, 10 Feb 1999 15:08:50 -0800 From: David Schwartz To: [email protected] Subject: Security problems in ISDN equipment authentication A security flaw is probably still present in Ascend's multilink PPP implementation over ISDN. Due to its fundamental nature, it's probably in other ISDN...
netscape.js.table.dos.txt
http://www.securiteam.com/exploits/NetscapeCommunicatorJav.html Article Title 26/6/99 Netscape Communicator JavaScript crash Article Summary Due to an HTML parsing problem, a simple html page containing JavaScript can crash the Netscape communicator browser. Article Details The following HTML cod...
dslip203.txt
Date: Sat, 4 Jul 1998 11:10:54 -0500 From: CyberPsychotic Subject: allocslip I have the feeling that allocslip in dslip package has overflow in it, since it's setuid it should bring a rootshell with careful exploit. Here's how i tested it: pakage Dslip, version 2.03...
tcpdump 3.4 - Protocol Four Zero Header Length
tcpdump 3.4 - Protocol Four Zero Header Length // source: https://www.securityfocus.com/bid/313/info A vulnerability in tcpdump causes it to enter an infinite loop within the procedure ipprint from the file printip.c when it receives a packet with IP protocol number four and a zero header length...
ROS-2-2271
2.2271 Notification on the update of MIS OPERATION SYSTEM "RED OS" No. RU.29926343.02.01-01-24 RED SOFT LLC notifies about the completion of the testing procedure and release of the updated RED OS 7.3 distribution. In order to update your copy of RED OS to the current state, you need to perform a...
ROS-2-2814
2.2814 Notification on the update of MIS OPERATION SYSTEM "RED OS" No. RU.29926343.02.01-01-24 RED SOFT LLC notifies about the completion of the testing procedure and release of the updated RED OS 7.3 distribution. In order to update your copy of RED OS to the current state, you need to perform a...
KB3178925 - Cumulative update 1 for SQL Server 2014 SP2
None None...
Windows 10 S Version 1709 and Later Upgrade & Servicing Drivers for testing
Windows 10 S Version 1709 and Later Upgrade & Servicing Drivers for testing...