Mandrake Linux Security Advisory : php (MDKSA-2006:091)

An integer overflow in the wordwrap function could allow attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, triggering a heap-based buffer overflow CVE-2006-1990. The substrcompare function in PHP 5.x and 4.4.2 could allow attackers to cause ...

CVE-2006-2201

Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...

CVE-2006-2201

CAIRIM (CA Resource Initialization Manager) 1.x before 20060502 has an integrity violation due to a "problem state program" that uses SVC to elevate to supervisor state (key 0) in z/OS Common Services and LMP components across multiple products. This CVE affects CAIRIM and is documented with a vu...

NeonResponder-5.4.txt

Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...

CVE-2006-1991

The substrcompare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service memory access violation via an out-of-bounds offset argument...

CVE-2006-1991

The vulnerability CVE-2006-1991 affects PHP 5.1.2 where the substr_compare function can be triggered to cause a memory access violation (denial of service) via an out-of-bounds offset. The Initial Description states the context-dependent nature of the attack and the resulting DoS, but the Connect...

Code injection

Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service application outage via a crafted Clock Synchronisation packet that triggers an access violation...

CVE-2006-1941

CVE-2006-1941: Neon Responder 5.4 for LANsurveyor is affected. A crafted Clock Synchronisation packet can trigger an access violation, enabling remote attackers to cause a denial of service (partial availability impact). No remediation details are provided in the supplied documents.

Neon Responder (Dos,Exploit)

Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...

Neon Responder (Dos,Exploit)

Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...

MS Office Products Array Index Bounds Error (unpatched) PoC

No description provided by source. Full archive at http://www.milw0rm.com/sploits/excel03262006.rar Topic : Microsoft Office 2002 - Excel/Powerpoint/Word.. 10.0.2614.0 = 11.0.5612.0 Date : 02/12/2006 Author : posidron [email protected] Table of Contens ================ - Some Excel Information...

MS Office Products Array Index Bounds Error (unpatched) PoC

Exploit for unknown platform in category dos / poc =========================================================== MS Office Products Array Index Bounds Error unpatched PoC =========================================================== Full archive at http://www.milw0rm.com/sploits/excel03262006.rar Top...

CVE-2003-1300

Baby FTP Server BabyFTP 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a denial of service via a large number of connections from the same IP address, which triggers an access violation...

MDKSA-2005:127-1 : mozilla-thunderbird

A number of vulnerabilities were reported and fixed in Thunderbird 1.0.5 and Mozilla 1.7.9. The following vulnerabilities have been backported and patched for this update: The native implementations of InstallTrigger and other XPInstall- related javascript objects did not properly validate that...

[VulnWatch] Fortinet Advisory: Apple QuickTime Player Color Map Entry Size Buffer Overflow

Fortinet Security Advisory: FSA-2006-06 Apple QuickTime Player Color Map Entry Size Buffer Overflow Advisory Date : January 12, 2006 Reported Date : November 28, 2005 Vendor : Apple computers Affected Products : Apple QuickTime Player v7.0.3 Severity : High Reference :...

CVE-2005-4269

mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service access violation by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly...

freeFTPd 1.0.8 - USER Remote Buffer Overflow

freeFTPd 1.0.8 - USER Remote Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 26\09\05 / || / / i Title: FreeFTPD Remote USER Buffer overflow i Discovered by: barabas mutsonline i Exploit by: Expanders Why FTPD crash? When logging option is enabled freeftpd copy the user...

freeFTPd 1.0.8 - 'USER' Remote Buffer Overflow

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 26\09\05 / || / / i Title: FreeFTPD Remote USER Buffer overflow i Discovered by: barabas mutsonline i Exploit by: Expanders Why FTPD crash? When logging option is enabled freeftpd copy the user and the pass supplied by the user in the...

Apache Input Header Folding and mod_ssl ssl_io_filter_cleanup DoS Vulnerabilities

The remote host appears to be running a version of Apache 2.x which is older than 2.0.50. There is denial of service in apache httpd 2.0.x by sending a specially crafted HTTP request. It is possible to consume arbitrary amount of memory. On 64 bit systems with more than 4GB virtual memory this ma...

counter.exe vulnerability

The CGI SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11725";...