3 results (0.004 seconds)

CVSS: 5.0EPSS: 11%CPEs: 30EXPL: 2

licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections. licq antes de 1.3.6 permite a atacantes remotos provocar una denegación de servicio (agotamiento de descriptores de ficheros y caída de la aplicación) mediante gran número de conexiones. • https://www.exploit-db.com/exploits/31627 http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html http://seclists.org/bugtraq/2008/Apr/0100.html http://secunia.com/advisories/30055 http://secunia.com/advisories/30236 http://securityreason.com/securityalert/3851 http://www.licq.org/changeset/6146 http://www.licq.org/ticket/1623 http://www.mandriva.com/security/advisories?name=MDVSA-2008:159 http://www.openwall.com/lists/oss-security/2008/04/25/1 http: • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers. • http://csdl.computer.org/comp/proceedings/hicss/2004/2056/09/205690277.pdf •

CVSS: 7.5EPSS: 6%CPEs: 5EXPL: 0

Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as "%d". Desbordamiento de buffer em licq 1.0.4 y anteriores permite a atacantes remotos provocar una denegación de servicio (caida) y posiblemente ejecutar código arbitrario por medio de una cadena larga de formateo de caracteres, por ejemplo ""%d"" • http://marc.info/?l=bugtraq&m=101301254432079&w=2 http://marc.info/?l=bugtraq&m=101318594420200&w=2 http://www.iss.net/security_center/static/8107.php http://www.securityfocus.com/bid/4036 •