Cisco Wide Area Application Services DoS

TCP TYN flood to TCP/139 and TCP/445 ports causes device to hang...

Snort DCE/RPC preprocessor buffer overflow

Added: 07/09/2007 CVE: CVE-2006-5276 BID: 22616 OSVDB: 32094 Background Snort is an open-source intrusion detection system. It includes a DCE/RPC preprocessor, which reassembles DCE/RPC traffic before it is passed to the intrusion detection engine. Problem A buffer overflow vulnerability in the...

Snort DCE/RPC preprocessor buffer overflow

Added: 07/09/2007 CVE: CVE-2006-5276 BID: 22616 OSVDB: 32094 Background Snort is an open-source intrusion detection system. It includes a DCE/RPC preprocessor, which reassembles DCE/RPC traffic before it is passed to the intrusion detection engine. Problem A buffer overflow vulnerability in the...

MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445) v2

No description provided by source. Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and Windows 2003 serve...

MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445) v2

Exploit for unknown platform in category remote exploits =============================================================== MS Windows DNS RPC Remote Buffer Overflow Exploit port 445 v2 =============================================================== Exploit v2 features: - Target Remote port 445 by...

MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445)

No description provided by source. Microsoft DNS Server Remote Code execution Exploit and analysis Advisory: http://www.microsoft.com/technet/security/advisory/935964.mspx This remote exploit works against port 445 also Microsoft RPC api used Author: Mario Ballano mballanogmail.com Andres Tarasco...

[Full-disclosure] Microsoft DNS Server Remote Code execution Exploit and analysis

Hi, im sending you the headers of the new exploit code for microsoft DNS servers. You can download the full source code exploit and analysis at: - http://www.514.es/MicrosoftDnsServerExploit.zip or - http://www.48bits.com/exploits/dnsxpl.rar Microsoft DNS Server Remote Code execution Exploit and...

Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942)

Mailslot bug MS06-035 vs. non-Mailslot bugMS0?-???/CVE-2006-3942 This is the story of a yet unpatched bug which is not a 0-day. Time line: 2006-07-12 - MS06-035 Published by Microsoft 1 2006-07-12 - "Windows Mailslot MS06-035 DoS" module released to IMPACT customers 2006-07-13 - We realized too...

Microsoft Server Service Mailslot vulnerable to heap overflow

Overview A buffer overflow vulnerability in the Microsoft mailslot server service may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Mailslot A mailslot is a temporary mechanism that can facilitate data transfer between hosts. Mailslots messages are limited ...

SMB/CIFS Server Detection

This script detects whether port 445 and 139 are open and if they are running a CIFS/SMB server. SPDX-FileCopyrightText: 2006 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Korgo Worm Detection

Nessus found that TCP ports 113 and 3067 are open. The Korgo worm is known to open a backdoor on these ports. It propagates by exploiting the LSASS vulnerability on TCP port 445 as described in Microsoft Security Bulletin MS04-011 Note that Nessus did not try to talk to the backdoor, so this migh...

CVE-2002-0597

LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service CPU/memory exhaustion via a stream of malformed data to microsoft-ds port 445...

Microsoft Windows Server 2000 - Lanman Denial of Service (2)

source: https://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU and Kernel mode memory usage...

Microsoft Windows 2000 vulnerable to DoS via malformed packets sent to port 445/tcp

Overview The default configuration of Microsoft Windows 2000 does not properly handle malformed packets received on TCP port 445. As a result, Windows may cease to function normally upon receipt of malformed packets on this port. Description Microsoft LAN Manager LANMAN is enabled by default on...

Buffer overflow in Windows 2000/NT SMB protocol

Malcrafted SMB quiery into port 139/445 causes server to crash...

CVE-2002-0283

Windows XP with port 445 open allows remote attackers to cause a denial of service CPU consumption via a flood of TCP SYN packets containing possibly malformed data...

CVE-2002-0283

Windows XP with port 445 open allows remote attackers to cause a denial of service CPU consumption via a flood of TCP SYN packets containing possibly malformed data...

CVE-2002-0283

CVE-2002-0283 affects Windows XP where an attacker can induce CPU consumption (DoS) by sending a flood of TCP SYN packets with possibly malformed data to port 445 (SMB). This is a network-vector, low-complexity attack requiring no authentication, with the impact described as partial availability....

Windows 2000 Directory Service DoS

Flood to TCP/445 microsoft-ds port causes server to hang...

KPMG-2002011: Windows 2000 microsoft-ds Denial of Service

-------------------------------------------------------------------- -=Windows 2000 microsoft-ds Denial of Service=- courtesy of KPMG Denmark BUG-ID: 2002011 Released: 17th Apr 2002 -------------------------------------------------------------------- Problem: ======== The default LANMAN registry...