10126 matches found
CVE-2006-0737
eStara SIP softphone allows remote attackers to cause a denial of service crash via a SIP OPTIONS request with a negative Expires field...
CVE-2006-0737: Undefined Security Weakness
eStara SIP softphone allows remote attackers to cause a denial of service crash via a SIP OPTIONS request with a negative Expires field...
Linux kernel ICMP DoS
record-route or timestamp IP options handling vulnerability...
CVE-2006-0454
Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...
CVE-2006-0454
Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...
CVE-2006-0454
The CVE-2006-0454 issue affects the Linux kernel (2.6.x) where icmp_send mishandles failures in ip_options_echo, enabling remote attackers to crash the host via crafted ICMP options (record-route, timestamp with needaddr and truncated value). Public advisories from SUSE, Red Hat, Fedora, Ubuntu d...
CVE-2006-0454: Undefined Security Weakness
Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...
CVE-2004-0592
Summary: CVE-2004-0592 affects the SUSE Linux 2.6.5 kernel with USAGI patches, specifically the netfilter IPv6 path. The issue arises in the tcp_find_option function when using iptables and TCP options rules, where a large option length can yield a negative integer after casting to char, causing ...
Buffer overflow
Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via the DHCP options field...
CVE-2006-0304: Undefined Security Weakness
Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via the DHCP options field...
CVE-2006-0304
Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via the DHCP options field...
Linksys VPN routers DoS
IP packet with invalid IP options causes router to crash...
Mandrake Linux Security Advisory : fuse (MDKSA-2005:216)
Thomas Beige found that fusermount failed to securely handle special characters specified in mount points, which could allow a local attacker to corrupt the contents of /etc/mtab by mounting over a maliciously-named directory using fusermount. This could potentially allow the attacker to set...
Ubuntu 4.10 : vim vulnerability (USN-52-1)
Ciaran McCreesh found several vulnerabilities related to the use of options in Vim modeline commands, such as 'termcap', 'printdevice', 'titleold', 'filetype', 'syntax', 'backupext', 'keymap', 'patchmode', and 'langmenu'. If an attacker tricked an user to open a file with a specially crafted...
Xmame Multiple Arcade Machine Emulator buffer overflow
Buffer overflow on different command line options parsing...
Dual DHCP DNS Server 1.0 - DHCP Options Remote Buffer Overflow
source: https://www.securityfocus.com/bid/16298/info Dual DHCP DNS Server is prone to a remote buffer overflow vulnerability. The vulnerability presents itself when the server handles excessive data through the DHCP options field. Successful exploitation can allow attackers to trigger a denial of...
DEBIAN-CVE-2005-4873
Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow context-dependent attackers to execute arbitrary code via vectors that result in long function parameters, as demonstrated by the cupsgetdestoptions function in phpcups.c...
CVE-2004-2652
Removed by vendor...
CVE-2004-2652
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service crash via packets with invalid TCP/IP options, which trigger a null dereference...
Multi-Format Shellcode Encoding Tool - Beta v2.0 (w32)
No description provided by source. / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" [email protected] .SP dSSP' sSSSSSSP http://spaces.msn.com/members/berendjanwever iS: Thi...