CVE-2006-5276

CVE-2006-5276 describes a stack-based buffer overflow in the DCE/RPC preprocessor of Snort (and Sourcefire IDS) that can be triggered by crafted SMB traffic to remote receivers. Affected versions include Snort before 2.6.1.3 and 2.7 before beta 2, as well as the Sourcefire Intrusion Sensor. The v...

snort IDS buffer overflow

Buffer overflow on DCE/RPC protocol parsing...

CVE-2006-5276

Removed by vendor...

CVE-2006-5276

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic...

Snort 2 DCE/RPC Preprocessor Buffer Overflow

This module allows remote attackers to execute arbitrary code by exploiting the Snort service via crafted SMB traffic. The vulnerability is due to a boundary error within the DCE/RPC preprocessor when reassembling SMB Write AndX requests, which may result a stack-based buffer overflow with a...

snort -- DCE/RPC preprocessor vulnerability

A IBM Internet Security Systems Protection Advisory reports: Snort is vulnerable to a stack-based buffer overflow as a result of DCE/RPC reassembly. This vulnerability is in a dynamic-preprocessor enabled in the default configuration, and the configuration for this preprocessor allows for...

Sourcefire Snort DCE/RPC preprocessor does not properly reassemble fragmented packets

Overview A vulnerability in the Sourcefire Snort DCE/RPC preprocessor may allow a remote, unauthenticated attacker to execute arbitrary code. Description Sourcefire Snort is a widely-deployed, open-source network intrusion detection system IDS. Snort and its components are used in other IDS...

MS Windows NetpManageIPCConnect Stack Overflow Exploit (py)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows NetpManageIPCConnect Stack Overflow Exploit py =========================================================== !/usr/bin/python MS06-070 Windows WorkStation...

Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow (MS06-070) (Python)

Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow MS06-070 Python !/usr/bin/python MS06-070 Windows WorkStation NetpManageIPCConnect Vulnerability Exploit Tested on windows 2000 server SP4 Usage: python NetAPI-NetrJoinDomain2.py Requires a domain controller on the network configure...

MS-RPC Programs Lookup (CVE-2006-1314)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

[SA20364] IBM DCE Two Kerberos Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

IBM DCE Kerberos DoS

No description provided...

CVE-2005-3644

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

CVE-2005-3644

CVE-2005-3644 describes a memory exhaustion/DoS condition in the Windows Plug and Play (PnP) service. The issue arises in UPnP handling via RPC calls (PNP_GetDeviceList) in Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, where a remote attacker can request a large output bu...

DCE/RPC and MSRPC Services Enumeration

Distributed Computing Environment / Remote Procedure Calls DCE/RPC or MSRPC based service enumeration. SPDX-FileCopyrightText: 2005 Dave Aitel ported to NASL by rd and Pavel Kankovsky Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

MS-RPC over CIFS Inspection Properties (CVE-2003-0533)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

[SA16259] HP NonStop Server DCE Core Services Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

HP-UX PHSS_29646 : HP-UX OpenView DCE, Remote Denial of Service (DoS) (HPSBUX00274 SSRT3617 rev.3)

s700800 11.00 OV ITO6.0X Solaris Agent Patch A.06.15.1 : Potential security vulnerability in DCE. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS29646. The text itself is copyright C Hewlett-Packard...

HP-UX PHSS_29644 : HP-UX OpenView DCE, Remote Denial of Service (DoS) (HPSBUX00274 SSRT3617 rev.3)

s700800 11.00 OV ITO6.0X Linux Agent Patch A.06.15.1 : Potential security vulnerability in DCE. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS29644. The text itself is copyright C Hewlett-Packard...

HP-UX PHSS_29645 : HP-UX OpenView DCE, Remote Denial of Service (DoS) (HPSBUX00274 SSRT3617 rev.3)

s700800 11.X OV ITO7.1X Msg/Act Solaris Agent A.07.22.1 : Potential security vulnerability in DCE. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS29645. The text itself is copyright C Hewlett-Packard...