Nortel IP Phone forced re-authentication

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Phone Vendor: Nortel Subject: IP Phone forced re-authentication Risk: High Effect: Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: October, 18th 2007 Introduction: ------------- The UNIStim...

Nortel Networks UNIStim IP SoftPhone 2050 - RTCP Port Buffer Overflow

Nortel Networks UNIStim IP SoftPhone 2050 - RTCP Port Buffer Overflow source: https://www.securityfocus.com/bid/26118/info Nortel Networks UNIStim IP Softphone is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it t...

Datagram Transport Layer Security Detection

The remote service is encrypted using Datagram Transport Layer Security DTLS, which provides communications privacy for datagram protocols. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid27057; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate"...

openssl dtls out of order vulnerabilitiy

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors...

Skulltag game buffer overflow

Buffer overflow on UDP datagram parsing...

TS-2007-001-0: BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability

Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability Date: 2007-07-29 Advisory ID: TS-2007-001-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details...

DEBIAN-CVE-2007-2297

The SIP channel driver chansip in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service crash...

CVE-2007-1170

SimBin GTR - FIA GT Racing Game 1.5.0.0 and earlier, GT Legends 1.1.0.0 and earlier, GTR 2 1.1 and earlier, and RACE - The WTCC Game 1.0 and earlier allow remote attackers to cause a denial of service client disconnection via an empty UDP packet to the server port...

DEBIAN-CVE-2006-6858

Miredo 0.9.8 through 1.0.5 does not properly authenticate a Teredo bubble during UDP hole punching with HMAC-MD5-64 hashing, which allows remote attackers to impersonate an arbitrary Teredo client...

CVE-2006-3393

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service CPU consumption by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket...

CVE-2006-3393

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service CPU consumption by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket...

CVE-2006-3393: Undefined Security Weakness

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service CPU consumption by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket...

Code injection

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

CVE-2006-2413

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

CVE-2006-2413

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

DEBIAN-CVE-2006-2413

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

CVE-2006-2413

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

CVE-2006-2413

CVE-2006-2413 affects GNUnet prior to SVN revision 2781. The vulnerability allows remote attackers to trigger a denial of service (infinite loop and CPU consumption) by sending an empty UDP datagram, possibly involving FIONREAD errors. The available documents describe the root cause as an issue i...

CVE-2006-2413: Undefined Security Weakness

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

CVE-2006-0967: Undefined Security Weakness

NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service memory usage and cpu utilization via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usual...