 |
|
|
|
| Microsoft Windows TCP/IP stack multiple vulnerabilities | | Published: |  | 13.04.2005 | | Source: |  | MICROSOFT | | SecurityVulns ID: |  | 4679 | | Type: |  | remote | | Level: |  | 9/10 | | Description: |  | Memory corruption on IP packets handling, TCP connection reset with spoofed TCP and ICMP packets, a varinat of LAND attack. |
| MSN Messenger GIF file buffer overflow | | Published: | | 13.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4681 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Buffer overflow on GIF files parsing. |
| JavaMail directory traversal | | Published: | | 13.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4683 | | Type: | | library | | Level: | | 5/10 | | Description: | | Content-Disposition header filename is not checked. |
| Oracle multiple vulnerabilities | | Published: | | 13.04.2005 | | Source: | | NTBUGTRAQ | | SecurityVulns ID: | | 4685 | | Type: | | remote | | Level: | | 5/10 |
| Microsoft Windows MSHTA code execution | | Published: | | 13.04.2005 | | Source: | | MICROSOFT | | SecurityVulns ID: | | 4676 | | Type: | | client | | Level: | | 6/10 | | Description: | | Content type of the file is determined based on CLSID in file content, not by it's extention. |
| Windows 2000/XP/2003 kernel multiple vulnerabilities | | Published: | | 13.04.2005 | | Source: | | MICROSOFT | | SecurityVulns ID: | | 4678 | | Type: | | local | | Level: | | 7/10 | | Description: | | Buffer overflow during font files parsing, buffer overflow in CSRSS (Win32 execution subsystem), privilege escalation. |
| Veritas i3 multiple vulnerabilities | | Published: | | 13.04.2005 | | Source: | | NTBUGTRAQ | | SecurityVulns ID: | | 4686 | | Type: | | remote | | Level: | | 5/10 |
| Axel download accelerator buffer overflow | | Published: | | 13.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4688 | | Type: | | client | | Level: | | 5/10 | | Description: | | Buffer overflow on HTTP redirection handling. |
| Oracle Forms SQL injection | | Published: | | 13.04.2005 | | Source: | | KORNBRUST | | SecurityVulns ID: | | 4690 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Form request data is not validated. |
Microsoft Word integer overflow
updated since 07.10.2004 | | Published: | | 13.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4074 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Integer overflow in signed/unsigned conversion during .doc file parsing. |
PHP multiple vulnerabilities
updated since 13.04.2005 | | Published: | | 14.04.2005 | | Source: | | NTBUGTRAQ | | SecurityVulns ID: | | 4684 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Integer overflows on EXIF tags parsing. |
Multiple Microsoft Internet Explorer memory corruptions
updated since 13.04.2005 | | Published: | | 14.04.2005 | | Source: | | MICROSOFT | | SecurityVulns ID: | | 4675 | | Type: | | client | | Level: | | 6/10 | | Description: | | Memory corruptions of different types, including buffer overflows. |
gld / postgrey antispam greylisting daemon for Postfix multiple vulnerabilities
updated since 13.04.2005 | | Published: | | 17.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4682 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Multiple buffer overflows, format string bugs. |
Microsoft Exchange Server SMTP protocol buffer overflow
updated since 13.04.2005 | | Published: | | 20.04.2005 | | Source: | | MICROSOFT | | SecurityVulns ID: | | 4680 | | Type: | | remote | | Level: | | 9/10 | | Description: | | Heap overflow on extended SMTP commands. |
Lotus Domino multiple vulnerabilities
updated since 13.04.2005 | | Published: | | 23.06.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4687 | | Type: | | remote | | Level: | | 5/10 |
Microsoft Message Queuing buffer overflow
updated since 13.04.2005 | | Published: | | 30.06.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4677 | | Type: | | remote | | Level: | | 7/10 | | Description: | | Buffer overflow in RPC-based protocol. |
ICMP and TCP timestamp attacks to reset TCP connections
updated since 13.04.2005 | | Published: | | 05.09.2005 | | Source: | | FGONT | | SecurityVulns ID: | | 4689 | | Type: | | remote | | Level: | | 6/10 | | Description: | | By using different ICMP packet types and TCP timestamps values it's possible to cause TCP connection resets or performance decrease. |
| Original document |  | SECUNIA, UnixWare ICMP Message Handling Denial of Service (05.09.2005) |
| | | Fernando Gont , [Full-disclosure] ICMP attacks against TCP: Conclusions (23.07.2005) |
| | | Fernando Gont , ICMP-based blind connection-reset attack (23.07.2005) |
| | | Fernando Gont , [Full-disclosure] ICMP-based blind performance-degrading attack (20.07.2005) |
| | | Fernando Gont , [Full-disclosure] Trivial BGP attacks (ICMP-based blind throughput-reduction attack) (20.07.2005) |
| | | SECUNIA, [SA16126] Blue Coat Products ICMP Message Handling Denial of Service (20.07.2005) |
| | | SECUNIA, [SA16106] Avaya Predictive Dialing System TCP/IP Denial of Service (19.07.2005) |
| | | HP, HPSBTU01210 SSRT4743, SSRT4884 rev.0 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS) (19.07.2005) |
| | | SECUNIA, [SA15761] Nortel Networks Products ICMP Handling Vulnerabilities (16.07.2005) |
| | | Vic Vandal, [Full-disclosure] ICMP Security Vulnerabilities - NEW (cough) (13.07.2005) |
| | | KERNELTRAP, Feature: OpenBSD Hackathon 2005, Part III (07.07.2005) |
| | | Theo de Raadt, ICMP vulnerabilities (07.07.2005) |
| | | SECUNIA, [SA15876] Avaya Products TCP Timestamp Denial of Service (01.07.2005) |
| | | FREEBSD, FreeBSD Security Advisory FreeBSD-SA-05:15.tcp (30.06.2005) |
| | | SECUNIA, [SA15851] Blue Coat Products TCP Timestamp Denial of Service (29.06.2005) |
| | | SECUNIA, [SA15531] BIG-IP TCP Timestamp Denial of Service (27.05.2005) |
| | | SECUNIA, [SA15409] Hitachi Various Products TCP Timestamp Denial of Service (20.05.2005) |
| | | SECUNIA, [SA15434] ALAXALA Networks Products TCP Connection Denial of Service (20.05.2005) |
| | | SECUNIA, [SA15393] Cisco Various Products TCP Timestamp Denial of Service (19.05.2005) |
| | | SECUNIA, [SA15417] OpenBSD TCP Timestamp Denial of Service (19.05.2005) |
| | | HP, [security bulletin] SSRT5954 rev.0 HP-UX TCP/IP Remote Denial of Service (DoS) (26.04.2005) |
| | | CISCO, [Full-disclosure] Cisco Security Advisory: Crafted ICMP Messages Can Cause Denial of Service (13.04.2005) |
| | | FGONT, ICMP attacks against TCP (13.04.2005) |
| | | MICROSOFT, Microsoft Security Bulletin MS05-019 Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service (893066) (13.04.2005) |
|
|
|
|
|
|
|
|
