DoS против IPRoutes (packet flood) updated since 06.12.2001
Published:		25.11.2003
Source:		BUGTRAQ
SecurityVulns ID:		1615
Type:		remote
Level:		5/10
Описание:		Флуд мелкими пакетами приводит к отказу маршрутизатора.

Affected:

IPROUTE : IPRoute 1.18

Original document

Chris Gragsone, IPRoute Fragmentation Denial of Service Vulnerability (06.12.2001)

Discuss:

Read or add your comments to this news (0 comments)

stunnel file descriptors leak updated since 04.09.2003
Published:		25.11.2003
Source:		BUGTRAQ
SecurityVulns ID:		3091
Type:		local
Level:		5/10
Description:		Child process has access to critical descriptors.

Affected:		STUNNEL : stunnel 3.24
		STUNNEL : stunnel 4.00
		STUNNEL : stunnel 3.25

Original document		REDHAT, [RHSA-2003:296-01] Updated stunnel packages available (25.11.2003)
		Steve Grubb, Stunnel-3.x Daemon Hijacking (04.09.2003)

Files:		stunnel descriptor leak PoC
Discuss:		Read or add your comments to this news (0 comments)

Pan DoS
Published:		25.11.2003
Source:		BUGTRAQ
SecurityVulns ID:		3282
Type:		client
Level:		5/10
Description:		DoS on reading article with oversized header.

Original document

REDHAT, [RHSA-2003:311-01] Updated Pan packages fix denial of service vulnerability (25.11.2003)

Discuss:

Read or add your comments to this news (0 comments)

epic buffer overflow
Published:		25.11.2003
Source:		BUGTRAQ
SecurityVulns ID:		3283
Type:		client
Level:		5/10
Description:		DoS on oversized CTCP nickname.

Affected:

EPIC : epic 1.0

Original document

REDHAT, [RHSA-2003:342-01] Updated EPIC packages fix security vulnerability (25.11.2003)

Files:		EPIC4 remote client-side stack-based overflow
Discuss:		Read or add your comments to this news (0 comments)

Thomson TCM315, 510 DoS updated since 25.11.2003
Published:		26.11.2003
Source:		BUGTRAQ
SecurityVulns ID:		3281
Type:		remote
Level:		5/10
Description:		Oversized request to HTTP interface leads to buffer overflow.

Affected:		THOMSON : TCM315
		THOMSON : Speedtouch 510

Original document		Kevin Milne, Speedtouch 510 DOS (26.11.2003)
		Administrador de ShellSec, Thomnson TCM315 Denial of service (25.11.2003)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs updated since 25.11.2003
Published:		29.11.2003
Source:
SecurityVulns ID:		3280
Type:		remote
Level:		5/10

Affected:		COMMERCESQL : CommerceSQL
		VIENUKE : VieBoard 2.6
		LOTTASOPHIE : My_eGallery 3.1
		CBVFD : Guestbook 1.2
		PHPBB : phpBB 2.06

Original document		Hat-Squad Security Team, [Hat-Squad] phpBB search_id injection exploit (29.11.2003)
		n.teusink_(at)_planet.nl, phpBB 2.06 search.php SQL injection (28.11.2003)
		BrainRawt, RNN's Guestbook 1.2 Multiple Vulnerabilities (28.11.2003)
		Bojan Zdrnja, Remote execution in My_eGallery (27.11.2003)
		Manuel [ekerazha], [Full-Disclosure] VieNuke VieBoard SQL Injection Vulnerability... again (25.11.2003)
		Mariusz Ciesla, [CommerceSQL] Remote File Read Vulnerability (25.11.2003)

Files:		phpBB v<=2.06 search_id sql injection exploit (POC version)
Discuss:		Read or add your comments to this news (0 comments)

Moni HTTP interface multiple bugs updated since 25.11.2003
Published:		06.04.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3279
Type:		remote
Level:		5/10
Description:		Buffer overflow, DoS.

Affected:

TILDESLASH : Monit 4.1

Original document		Matthew Murphy, [VulnWatch] Advisory: Multiple Vulnerabilities in Monit (06.04.2004)
		S-Quadra Security Research, [Full-Disclosure] Monit 4.1 HTTP interface multiple security vulnerabilities (25.11.2003)

Files:		monit <= 4.1 remote root exploit
		Remote Root Exploit for Monit <= 4.2
		Monit 4.1 remote shell exploit (HTTP)
Discuss:		Read or add your comments to this news (0 comments)