Samba 3.0.29 (Client) - receive_smb_raw() Buffer Overflow (PoC)

Samba 3.0.29 Client - receivesmbraw Buffer Overflow PoC !/usr/bin/perl 06/01/2008 - ksOSe smbclient //localhost/w00t glibc detected smbclient: free: invalid next size fast: 0x0823c2d8 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '445'...

Samba 3.0.29 (Client) - 'receive_smb_raw()' Buffer Overflow (PoC)

!/usr/bin/perl 06/01/2008 - ksOSe smbclient //localhost/w00t glibc detected smbclient: free: invalid next size fast: 0x0823c2d8 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '445', Listen = 1, Reuse = 1 || die$!; whilemy $csock =...

Stack overflow

Stack-based buffer overflow in the splitredraw function in split.c in mtr before 0.73, when invoked with the -p aka --split option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the nsnamentop function in...

CVE-2008-2357

Stack-based buffer overflow in the splitredraw function in split.c in mtr before 0.73, when invoked with the -p aka --split option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the nsnamentop function in...

CVE-2008-2357

Stack-based buffer overflow in the splitredraw function in split.c in mtr before 0.73, when invoked with the -p aka --split option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the nsnamentop function in...

CVE-2008-2357

CVE-2008-2357 affects mtr prior to version 0.73, where a stack-based buffer overflow in split_redraw (split.c) can be triggered by a crafted DNS PTR record when using -p. Several OpenVAS/Nessus entries link this to multiple distributions (e.g., SUSE/OpenSUSE, Gentoo GLSA, Slackware SSA) and refer...

CVE-2008-2357

Stack-based buffer overflow in the splitredraw function in split.c in mtr before 0.73, when invoked with the -p aka --split option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the nsnamentop function in...

Paper by Amit Klein (Trusteer): "PowerDNS Recursor DNS Cache Poisoning [pharming]"

Hello BugTraq Once again, a DNS cache poisoning against a popular DNS cache server. This time, it's PowerDNS the third most popular DNS server, servicing over 40 million users. The vendor coded several impressive security measures against DNS spoofing e.g. UDP source port randomization and spoofe...

AST-2008-005: HTTP Manager ID is predictable

Asterisk Project Security Advisory - AST-2008-005 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | HTTP Manager ID is predictable |...

Debian Security Advisory DSA 272-1 (dietlibc)

The remote host is missing an update to dietlibc announced via advisory DSA 272-1. OpenVAS Vulnerability Test $Id: deb2721.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 272-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-272)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-636-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 103-1 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 103-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 149-2 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 149-2. OpenVAS Vulnerability Test $Id: deb1492.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 149-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 636-1 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 636-1. OpenVAS Vulnerability Test $Id: deb6361.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 636-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 149-2 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 149-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-282)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 282-1 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 282-1. OpenVAS Vulnerability Test $Id: deb2821.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 282-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 039-1 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 039-1. OpenVAS Vulnerability Test $Id: deb0391.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 039-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 149-1 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 149-1. OpenVAS Vulnerability Test $Id: deb1491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 149-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...