Quest NetVault SmartDisk libnvbasics.dll Denial Of Service

A denial of service vulnerability has been reported in Quest's NetVault SmartDisk. The vulnerability is due to an error in the way SmartDisk handles invalid packet structures. A remote attacker may exploit this vulnerability by sending specially crafted packets to an affected system. Successful...

Citrix Provisioning Services Opcode Stack Buffer Overflow

A stack buffer overflow vulnerability exists in Citrix Provisioning Service. The vulnerability is due to an error when handling packet sent to the Provisioning Services server...

7-Technologies IGSS 9 Data Server/Collector Packet Handling

$Id: igss9misc.rb 12773 2011-05-30 21:06:56Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

7-Technologies IGSS 9 - Data Server/Collector Packet Handling (Metasploit)

$Id: igss9misc.rb 12779 2011-05-31 14:33:19Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities

This module exploits multiple vulnerabilities found on IGSS 9's Data Server and Data Collector services. The initial approach is first by transferring our binary with Write packets opcode 0x0D via port 12401 igssdataserver.exe, and then send an EXE packet opcode 0x0A to port 12397 dc.exe, which...

Citrix Provisioning Services StreamProcess.exe 0x40020010 Packet Handling RCE

The version of the StreamProcess.exe component included with the Citrix Provisioning Services installation running on the remote Windows host fails to validate user-supplied input in a packet type of 0x40020010 before copying it into a fixed length buffer on the stack. An unauthenticated, remote...

Wireshark - ZigBee ZCL Dissector Infinite Loop Denial of Service

Wireshark - ZigBee ZCL Dissector Infinite Loop Denial of Service Source: https://www.securityfocus.com/bid/44986/info Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets. Attackers can exploit this issue to cause the...

ntp security update

CentOS Errata and Security Advisory CESA-2009:1648 An updated ntp package that fixes a security issue is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used t...

DATAC Control RealWin SCADA System Crafted Packet Handling Buffer Overflow (CVE-2008-4322)

RealWin is a SCADA Supervisory Control And Data Acquisition server product developed by DATAC Group. SCADA is generally refers to an industrial control system, in which a computer system monitors and controls a industrial, infrastructure or facility based process. A SCADA System usually consists ...

winremote-dos.txt

include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 2008 r.2+server in the way it handles recieved packets becau...

WinRemotePC Full+Lite 2008 r.2server - Denial of Service

include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 2008 r.2+server in the way it handles recieved packets becau...

Microsoft Windows PGM Packet Handling Denial of Service (MS08-036; CVE-2008-1440)

PGM is a reliable and scalable multicast protocol that enables receivers to detect loss, request retransmission of lost data, or notify an application of unrecoverable loss. The vulnerability is due to the PGM's parsing code that fails to properly validate the option field length of a PGM packet....

McAfee Common Management Agent < 3.6.0.595 UDP Packet Handling Format String

According to its banner, the version of McAfee Common Management Agent CMA running on the remote host is prior to 3.6.0.595. It is, therefore, affected by a flaw in the logDetail function of applib.dll due to calling vsnwprintf without the needed format string argument. An unauthenticated, remote...

McAfee Common Management Agent 3.6.0 UDP Packet Handling Format String (credentialed check)

The remote host is running a Common Management Agent, a component of the ePolicy Orchestrator system security management solution from McAfee. The version of the Common Management Agent on the remote host is earlier than 3.6.0.595 and, as such, contains a format string vulnerability. If configure...

Linksys SPA-2102 Phone Adapter Packet Handling - Denial of Service

Linksys SPA-2102 Phone Adapter Packet Handling - Denial of Service source: https://www.securityfocus.com/bid/28414/info Linksys SPA-2102 Phone Adapter is prone to a denial-of-service vulnerability when handling multiple packets in quick succession. Attackers can exploit this issue to deny access ...

activePDF Server < 3.8.6 Packet Handling Remote Overflow

activePDF Server is installed on the remote host. It is used to provide PDF generation and conversion from within enterprise and web applications. The version of activePDF Server installed on the remote host contains a heap-based buffer overflow that can be triggered by sending a packet specifyin...

Debian Security Advisory DSA 104-1 (cipe)

The remote host is missing an update to cipe announced via advisory DSA 104-1. OpenVAS Vulnerability Test $Id: deb1041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 104-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

openSUSE 10 Security Update : pdns (pdns-1314)

Remote attackers could crash the pdns server by sending malformed packets CVE-2006-2069. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pdns-1314. The text description of this plugin is C SUS...

openSUSE 10 Security Update : kernel (kernel-2397)

This kernel update fixes the following security problems : - CVE-2006-4145: A bug within the UDF filesystem that caused machine hangs when truncating files on the filesystem was fixed. 186226 - A potential crash when receiving IPX packets was fixed. This problem is thought not to be exploitable...

CVE-2007-1404

tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recvfrom call. NOTE: this issue might be related to CVE-2006-4948...