SuSE 10 Security Update : samba (ZYPP Patch Number 2556)

A logic error in the deferred open code can lead to an infinite loop in Samba's smbd daemon. CVE-2007-0452 In addition the following changes are included with these packages : - Move tdb utils to the client package. - The version string of binaries reported by the -V option now include the packag...

Design/Logic Flaw

Eval injection vulnerability in environment.php in Olate Download od 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the 1 PDO::ATTRSERVERVERSION or 2 PDO::ATTRCLIENTVERSION attribute...

CVE-2007-4454

Eval injection vulnerability in environment.php in Olate Download od 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the 1 PDO::ATTRSERVERVERSION or 2 PDO::ATTRCLIENTVERSION attribute...

CVE-2006-2012: Undefined Security Weakness

Format string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a denial of service via the version string...

Skulltag 0.96f - Version String Remote Format String (PoC)

Luigi Auriemma Application: Skulltag http://www.skulltag.com Versions: = 0.96f Platforms: Windows Bug: format string Exploitation: remote, versus server Date: 23 Apr 2006 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org Backup:...

SecureCRT SSH1 protocol version string overflow

The remote host is using a vulnerable version of SecureCRT, a SSH/Telnet client built for Microsoft Windows operation systems. It has been reported that SecureCRT contain a remote buffer overflow allowing an SSH server to execute arbitrary command via a specially long SSH1 protocol version string...

CVE-2004-1706: Undefined Security Weakness

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service device crash and possibly execute arbitrary code via an HTTP GET request with a long version string...

Centrinity FirstClass HTTP Server 5.505.777.07.1 - Long Version Field Denial of Service

Centrinity FirstClass HTTP Server 5.505.777.07.1 - Long Version Field Denial of Service // source: https://www.securityfocus.com/bid/8793/info A problem has been reported in the handling of overly long HTTP version string data by Centrinity FirstClass. Because of this, it may be possible for an...

Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta

SecureCRT http://www.vandyke.com/products/securecrt/ seems to have a bug in a seemlingly trivial portion of its SSH connection code. When an SSH Client connects to a server, the server sends a version string containing minor and major numbers for the protocol, as well as a server-specific...