5 results (0.007 seconds)

CVSS: 7.5EPSS: 19%CPEs: 30EXPL: 2

28 Apr 2008 — licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections. licq antes de 1.3.6 permite a atacantes remotos provocar una denegación de servicio (agotamiento de descriptores de ficheros y caída de la aplicación) mediante gran número de conexiones. • https://www.exploit-db.com/exploits/31627 • CWE-399: Resource Management Errors •

CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 0

31 Dec 2003 — Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers. • http://csdl.computer.org/comp/proceedings/hicss/2004/2056/09/205690277.pdf •

CVSS: 9.8EPSS: 1%CPEs: 5EXPL: 0

29 May 2002 — Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as "%d". Desbordamiento de buffer em licq 1.0.4 y anteriores permite a atacantes remotos provocar una denegación de servicio (caida) y posiblemente ejecutar código arbitrario por medio de una cadena larga de formateo de caracteres, por ejemplo ""%d"" • http://marc.info/?l=bugtraq&m=101301254432079&w=2 •

CVSS: 9.8EPSS: 1%CPEs: 12EXPL: 0

02 Jul 2001 — licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. • http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html •

CVSS: 9.8EPSS: 11%CPEs: 12EXPL: 1

02 Jul 2001 — Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands. • https://www.exploit-db.com/exploits/20646 •