wzdftpd <= 0.8.0 (USER) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================== wzdftpd = 0.8.0 USER Remote Denial of Service Exploit ======================================================== Indonesian Newhack Security Advisory ------------------------------------...

WzdFTPD 0.8.0 - 'USER' Remote Denial of Service

Indonesian Newhack Security Advisory ------------------------------------ wzdftpd new Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "\n- K...

CVE-2007-5232: Undefined Security Weakness

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound...

EB Design Pty Ltd - EBCRYPT.dll 2.0 Multiple Remote Vulnerabilities

EB Design Pty Ltd - EBCRYPT.dll 2.0 Multiple Remote Vulnerabilities ----------------------------------------------------------------------------- EB Design Pty Ltd EBCRYPT.DLL v.2.0 Multiple Remote Vulnerabilites url: http://www.ebcrypt.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

DEBIAN-CVE-2007-4752

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted...

CVE-2007-4752

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted...

CVE-2007-4752

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted...

CVE-2007-4659: Undefined Security Weakness

The zendalterinientry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a memorylimit violation, which has unknown impact and attack vectors...

blizzard-dos.txt

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : Blizzard StarCraft Brood War Remote DoS Class : Remote/Local DoS Threat level : MED Discovered : 2007-08-08 Published : 2007-08-29 Credit : Gynvael Coldwind Vulnerable : StarCraft Brood War 1.15.1 and prior StarCraft 1.15.1 and prior...

Design/Logic Flaw

The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is no...

CVE-2007-4450

The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is no...

eCentrex VOIP Client module (uacomx.ocx 2.0.1) Remote BOF Exploit

No description provided by source. !-- 17/08/2007 04.41.37 eCentrex VOIP Client module uacomx.ocx 2.0.1 remote buffer overflow exploit ie6 / xp sp2 passing more than 164 chars to ReInit method in Username argument EAX 41414131 ECX 0013D444 ASCII "AAAAAAAA... EDX 00000000 EBX 00000000 ESP 0013D3A0...

CVE-2007-4450

The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is no...

CVE-2007-4450

CVE-2007-4450 affects the Toribash server (versions 2.71 and earlier). The vendor notes that the server does not properly handle long commands, enabling remote attackers to trigger a protocol violation where data is sent to other clients without a required LF character, as demonstrated by a SAY c...

CVE-2007-4450: Improper Input Validation

The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is no...

CVE-2007-4404

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

Command injection

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

CVE-2007-4404

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

CVE-2007-4404

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

CVE-2007-4404

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...