NeonResponder-5.4.txt

Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...

CVE-2006-1941

Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service application outage via a crafted Clock Synchronisation packet that triggers an access violation...

CVE-2006-1941

CVE-2006-1941: Neon Responder 5.4 for LANsurveyor is affected. A crafted Clock Synchronisation packet can trigger an access violation, enabling remote attackers to cause a denial of service (partial availability impact). No remediation details are provided in the supplied documents.

CVE-2006-1941

Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service application outage via a crafted Clock Synchronisation packet that triggers an access violation...

Neon Responder (Dos,Exploit)

Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...

Neon Responder (Dos,Exploit)

Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...

Neon Responder LANsurveyor add-on DoS

Service crash on malformed TCP/4347 packet...

Neon Responder 5.4 - Clock Synchronization Denial of Service

Neon Responder 5.4 - Clock Synchronization Denial of Service / Stefan Lochbihler/ include include include pragma commentlib,"ws232" define PORT 4347 char CLOCKMSG = "\x00\x0e\x5a\x00\x4c\xe9\x24\xb1\x17\x88\x40\x84"; //Password = "" void usage char; void endpgr char ,SOCKET, char; unsigned long...

Neon Responder 5.4 (Clock Synchronization) Denial of Service Exploit

No description provided by source. / Stefan Lochbihler/ include stdio.h include stdlib.h include winsock2.h pragma commentlib,"ws232" define PORT 4347 char CLOCKMSG = "\x00\x0e\x5a\x00\x4c\xe9\x24\xb1\x17\x88\x40\x84"; //Password = "" void usage char; void endpgr char ,SOCKET, char; unsigned long...

Neon Responder 5.4 (Clock Synchronization) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================================== Neon Responder 5.4 Clock Synchronization Denial of Service Exploit ==================================================================== / Stefan Lochbihler/ include include...

Neon Responder 5.4 - Clock Synchronization Denial of Service

/ Stefan Lochbihler/ include include include pragma commentlib,"ws232" define PORT 4347 char CLOCKMSG = "\x00\x0e\x5a\x00\x4c\xe9\x24\xb1\x17\x88\x40\x84"; //Password = "" void usage char; void endpgr char ,SOCKET, char; unsigned long gethost char ; int mainint argc, char argv WSADATA wsa; SOCKET...

Neon Responders 5.4 - Remote Clock Synchronization Denial of Service

Neon Responders 5.4 - Remote Clock Synchronization Denial of Service // source: https://www.securityfocus.com/bid/17569/info Neon Responders is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle malformed network packets. Thi...

Neon Responders 5.4 - Remote Clock Synchronization Denial of Service

// source: https://www.securityfocus.com/bid/17569/info Neon Responders is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle malformed network packets. This issue allows remote attackers to crash the affected application,...

Debian DSA-506-1 : neon - buffer overflow

Stefan Esser discovered a problem in neon, an HTTP and WebDAV client library. User input is copied into variables not large enough for all cases. This can lead to an overflow of a static heap variable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian DSA-487-1 : neon - format string

Multiple format string vulnerabilities were discovered in neon, an HTTP and WebDAV client library. These vulnerabilities could potentially be exploited by a malicious WebDAV server to execute arbitrary code with the privileges of the process using libneon. %NASLMINLEVEL 70300 C Tenable Network...

GLSA-200405-04 : OpenOffice.org vulnerability when using DAV servers

The remote host is affected by the vulnerability described in GLSA-200405-04 OpenOffice.org vulnerability when using DAV servers OpenOffice.org includes code from the Neon library in functions related to publication on WebDAV servers. This library is vulnerable to several format string attacks...

GLSA-200404-14 : Multiple format string vulnerabilities in cadaver

The remote host is affected by the vulnerability described in GLSA-200404-14 Multiple format string vulnerabilities in cadaver Cadaver code includes the neon library, which in versions 0.24.4 and previous is vulnerable to multiple format string attacks. The latest version of cadaver uses version...

GLSA-200405-13 : neon heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200405-13 neon heap-based buffer overflow Stefan Esser discovered a vulnerability in the code of the neon library : if a malicious date string is passed to the nerfc1036parse function, it can trigger a string overflow into static...

Neon < 0.24.7 WebDAV Client Library Unspecified Vulnerability

Binary data 1781.prm...

Neon < 0.23.8 Status Response Control Character Inclusion Vulnerability (deprecated)

Binary data 1778.prm...