CVE-2008-5828

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 MSNP15 is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the 1 IPv4InternalAddrsAndPorts, 2 IPv4Internal-Addrs, and 3 IPv4Internal-Port header...

Multiple XSRF in DD-WRT (Remote Root Command Execution)

Author: Michael Brooks !!!! I usually don't like posting my leet exploits to bugtraq because it is so unprofessional. You guys usually malform my exploits so they are totally useless, even to someone trying to write a patch! You also tend to get the wrong name! Michael Brooks wrote this! Exploits...

DD-WRT v24-sp1 (XSRF) Cross Site Reference Forgery Exploit

No description provided by source. Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product Homepage:...

DD-WRT v24-sp1 - Cross-Site Reference Forgery

DD-WRT v24-sp1 - Cross-Site Reference Forgery Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product...

Telecommunications is prohibited ADSL Router Internet crack method-vulnerability warning-the black bar safety net

Several methods are provided, everyone can try. ADSL share Internet access, there are two ways, one is proxy, one is the Address Translation（NAT），we often say that the routing is actually NAT mode, in fact the Routing and NAT principles there are still differences, there will not be discussed, no...

CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

Design/Logic Flaw

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

CVE-2008-5133

The connected CVE-2008-5133 entry describes Solaris SunOS/OpenSolaris ipnat/IPFilter behavior: on NAT-enabled DNS servers, it improperly alters the source port of a packet when the destination port is DNS, allowing remote attackers to spoof DNS responses and bypass the CVE-2008-1447 protection me...

openSUSE 10 Security Update : kernel (kernel-5700)

The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service crash attack. CVE-2008-3528: The ext234 filesystem code fail...

echoServer Detection

The remote host is running echoServer, which which allows peer-to-peer or client-server applications to connect to one another as a series of outbound connections, which may be helpful in avoiding problems caused by firewalls and NAT'ing routers. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.0. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Cisco IOS, Cisco 10000, uBR10012, uBR7200 and Cisco UCM multiple security vulnerabilities

DoS with L2TP, MPLS, IPS, SIP, SSL vulnerabilities, information leaks, multiple multicast security vulnerabilities, NAT SCP, IOS Software firewall application inspection security vulnerabilities...

Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability Advisory ID: cisco-sa-20080924-sccp http://www.cisco.com/warp/public/707/cisco-sa-20080924-sccp.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC GMT -...

CVE-2008-3811

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810...

CVE-2008-3810

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811...

Code injection

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811...

Code injection

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810...

CVE-2008-3810

Cisco IOS 12.2 and 12.4 are vulnerable when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled. A series of segmented SCCP messages can cause a reload (DoS) on affected devices. The vulnerability is tied to the NAT SCCP Fragmentation feature introduced in 12.4(6)T, with CVSS...

CVE-2008-3810

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811...

CVE-2008-3811

Cisco IOS 12.2 and 12.4 devices with NAT SCCP Fragmentation Support enabled are affected by CVE-2008-3811. The vulnerability allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages. Cisco’s advisory indicates fixes are available and provides a workaround: ...