rdesktop 1.5.0 iso_recv_msg() Integer Underflow Vulnerability PoC

No description provided by source. !/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; whilemy $c = $sock-accept...

rdesktop 1.5.0 iso_recv_msg() Integer Underflow Vulnerability PoC

Exploit for linux platform in category dos / poc ================================================================= rdesktop 1.5.0 isorecvmsg Integer Underflow Vulnerability PoC ================================================================= !/usr/bin/perl...

rdesktop 1.5.0 - iso_recv_msg() Integer Underflow (PoC)

rdesktop 1.5.0 - isorecvmsg Integer Underflow PoC !/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; whilemy $c ...

iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop iso_recv_msg() Integer Underflow Vulnerability

iDefense Security Advisory 05.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 07, 2008 I. BACKGROUND rdesktop is an open source client that speaks the Remote Desktop Protocol RDP. This allows Unix-based users to login to Windows Terminal Servers. More information is available at...

rdesktop 1.5.0 - 'iso_recv_msg()' Integer Underflow (PoC)

!/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; whilemy $c = $sock-accept print $c "\x03" . TPKT version "\x0...

RHEL 4 / 5 : openoffice.org (RHSA-2008:0175)

Updated openoffice.org 2.x packages to correct multiple security issues are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity...

iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability

iDefense Security Advisory 04.17.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 17, 2008 I. BACKGROUND OpenOffice is an open-source desktop office suite for many of today's popular operating systems. One of the file formats that OpenOffice supports is Quattro Pro QPRO. This format ...

CVE-2007-5747

CVE-2007-5747 is an OpenOffice.org vulnerability (OpenOffice.org before 2.4) where an integer underflow in the Quattro Pro (QPRO) import path allows a remote attacker to crash the application and potentially execute arbitrary code by crafting values in a QPRO file. The issue can trigger an excess...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org 2.x packages to correct multiple security issues are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity...

openoffice.org: Quattro Pro files parsing integer underflow

Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Quattro Pro QPRO file with crafted values that trigger an excessive loop and a stack-based buffer overflow...

CVE-2008-1552

The silcpkcs1decode function in the silccrypt library silcpkcs1.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS1 message, which triggers an integer...

Integer overflow

The silcpkcs1decode function in the silccrypt library silcpkcs1.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS1 message, which triggers an integer...

CVE-2008-1552

The silcpkcs1decode function in the silccrypt library silcpkcs1.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS1 message, which triggers an integer...

CVE-2008-1552

The CVE-2008-1552 issue affects the SILC Toolkit family: the silc_pkcs1_decode function in silccrypt (silcpkcs1.c) enables remote code execution via a crafted PKCS#1 message. Affected products/versions are SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2, indicati...

Debian Security Advisory DSA 639-1 (mc)

The remote host is missing an update to mc announced via advisory DSA 639-1. OpenVAS Vulnerability Test $Id: deb6391.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 639-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1149-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1264-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 659-1 (libpam-radius-auth)

The remote host is missing an update to libpam-radius-auth announced via advisory DSA 659-1. OpenVAS Vulnerability Test $Id: deb6591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 659-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1149-1 (ncompress)

The remote host is missing an update to ncompress announced via advisory DSA 1149-1. Tavis Ormandy from the Google Security Team discovered a missing boundary check in ncompress, the original Lempel-Ziv compress and uncompress programs, which allows a specially crafted datastream to underflow a...

openSUSE 10 Security Update : kernel (kernel-4752)

This kernel update fixes the following security problems : ++ CVE-2007-3104: The sysfsreaddir function in the Linux kernel 2.6 allows local users to cause a denial of service kernel OOPS by dereferencing a NULL pointer to an inode in a dentry. ++ CVE-2007-4997: A 2 byte buffer underflow in the...