Command-line URLs launch multiple tabs when Firefox not running — Mozilla

Security researcher Billy Rios reported that if Firefox is not already running, passing it a command-line URI with pipe "|" symbols will open multiple tabs. This URI splitting could be used to launch chrome: URIs from the command-line, a partial bypass of the fix for MFSA 2005-53 which was intend...

Null pointer dereference

The chrpshowcpuinfo function chrp/setup.c in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service crash via unknown vectors that cause the ofgetproperty function to fail, which triggers a NULL pointer dereference...

CVE-2003-1491

CVE-2003-1491 affects Kerio Personal Firewall 2.1.4, where a default DNS (UDP 53) inbound rule permits packets from source port 53, enabling remote bypass of firewall filters. This is a network-accessible bypass vulnerability; exploitation details are provided in multiple sources (NVD/NIST, CVE l...

CVE-2003-1491

Kerio Personal Firewall KPF 2.1.4 has a default rule to accept incoming packets from DNS UDP port 53, which allows remote attackers to bypass the firewall filters via packets with a source port of 53...

CVE-2007-1866

Stack-based buffer overflow in the dnsdecodereversename function in dnsdecode.c in dproxy-nexgen allows remote attackers to execute arbitrary code by sending a crafted packet to port 53/udp, a different issue than CVE-2007-1465...

Stack overflow

Stack-based buffer overflow in the dnsdecodereversename function in dnsdecode.c in dproxy-nexgen allows remote attackers to execute arbitrary code by sending a crafted packet to port 53/udp, a different issue than CVE-2007-1465...

CVE-2007-1866

CVE-2007-1866 involves a stack-based buffer overflow in the dns_decode_reverse_name function of the dproxy-nexgen project (dns_decode.c). The vulnerability allows remote attackers to gain arbitrary code execution by sending a crafted UDP DNS packet to port 53. This is a remote-exploit scenario wi...

CVE-2007-1465

Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53...

Stack overflow

Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53...

CVE-2007-1465

Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53...

CVE-2007-1465

CVE-2007-1465 describes a stack-based buffer overflow in dproxy.c for dproxy 0.1–0.5 triggered by a long DNS query packet to UDP port 53, enabling remote execution of code. The core issue is a overflow in handling DNS queries, leading to arbitrary code execution. The connected records also refere...

Windows Workstation service NetpManageIPCConnect buffer overflow

Added: 11/27/2006 CVE: CVE-2006-4691 BID: 20985 OSVDB: 30263 Background The Windows Workstation service routes network requests for file or printer resources. Problem A buffer overflow in the NetpManageIPCConnect function in the Windows Workstation service allows command execution when a domain...

Microsoft Windows NAT帮助程序远程拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows NAT帮助程序模块在处理畸形DNS报文时存在漏洞，远程攻击者可能利用此漏洞执行拒绝服务攻击。 如果Windows XP用户启用了Internet连接共享的话，则远程攻击者可以通过发送Additional RRs（也被称为Additional Information）部分包含有两个空字节的DNS报文导致服务和主机进程（svchost.exe）崩溃。由于ICS服务关系到防火墙服务，因此ICS崩溃就会导致防火墙服务失效。 Microsoft Windows XP SP2 Microsoft...

BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (3)

No description provided by source. / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Solaris 2.7 x86 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the "infoleek" bug through UDP to obtain the base /...

BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (2)

No description provided by source. / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Slackware 4.0/RedHat 6.2 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the "infoleak" bug through UDP to obtain t...

CVE-2005-4671

Technical details about CVE-2005-4671 are not publicly available in the provided connected documents. Monitor for updates.

Ubuntu 4.10 : imlib+png2 vulnerabilities (USN-53-1)

Pavel Kankovsky discovered several buffer overflows in imlib. If an attacker tricked a user into loading a malicious image, he could exploit this to execute arbitrary code in the context of the user opening the image. Note that Tenable Network Security has extracted the preceding description bloc...

Multiple Symantec security appliances fail to properly filter port 53/udp traffic

Overview A vulnerability exists in multiple Symantec security appliances that could allow a remote attacker to bypass the firewall using a source port of 53/udp. Description Symantec's Firewall/VPN appliances and Gateway Security models include a number of services such as tftpd, snmpd, and isakm...

DNS Server Fingerprinting

This script attempts to identify the remote DNS server type and version by sending various invalid requests to the remote DNS server and analyzing the error codes returned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script is a very crude attempt at doing DNS fingerprinting...

Firewall UDP Packet Source Port 53 Ruleset Bypass

It is possible to bypass the rules of the remote firewall by sending UDP packets with a source port equal to 53. An attacker may use this flaw to inject UDP packets to the remote hosts, in spite of the presence of a firewall. C Tenable Network Security, Inc. Problem: This check is prone to false...