Security Best Practice: Familiarize Yourself with the Max Ping Size Protection

Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for packets sent from the local host to a destination computer, including the local host's own interfaces.Ping operates by sending Internet...

Security Best Practice: Protect Yourself from Ping of Death Attacks

A Ping of Death POD is a type of attack on a computer that involves sending a malformed or otherwise malicious ping to a computer. A ping is normally 56 bytes in size or 84 bytes when IP header is considered; historically, many computer systems could not handle a ping packet larger than the maxim...

Asterisk 1.6 IAX - 'POKE' Requests Remote Denial of Service

source: https://www.securityfocus.com/bid/30321/info Asterisk is prone to a remote denial-of-service vulnerability because it fails to handle multiple 'POKE' requests in quick succession. Attackers can exploit this issue by sending a persistent stream of 'POKE' requests that will consume processo...

mtr: Stack-based buffer overflow

Background mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. Description Adam Zabrocki reported a boundary error within the splitredraw function in the file split.c, possibly leading to a stack-based buffer overflow. Impact A remote attack...

CVE-2008-2092: Undefined Security Weakness

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: the severity of this issue has been disputed since there are limited attack scenarios...

Universal honker CNN attack techniques parsing-vulnerability warning-the black bar safety net

Recently, CNN anchor, Carver te for the Chinese people with a strong discriminatory remarks, and CNN for this event the lack of sincerity of the apology and for the Chinese government's groundless accusations, roused the people of the country to strong indignation. So in some Patriotic art...

Attacking cisco router-bug warning-the black bar safety net

In you see Before you need to know: －what is IP address?－ What is ISP for?－ What is the TCP/IP data package?－ How to hide your IP address?－ How to use Telnet in?－ How to use HyperTerminal for?－ How to use Ping for?－ How to use TraceRoute it?－ How to use a proxy server?...

Nortel IP Phone DoS

Nortel IP phone DoS Discovered: 2008-02-25 Tested on firmware: 0604DAS Latest firmwares have also been tested. Welcome the return of the Ping of Death! wait a minute...isn't this 2008? Steps to reproduce: 1. ping -s 65500 ip of the phone Thanks to Spithash and the [email protected] crew...

Nortel UNIStim IP Phone - Remote Ping Denial of Service

source: https://www.securityfocus.com/bid/28004/info Nortel UNIStim IP Phone products are prone to a remote denial-of-service vulnerability because the software fails to properly handle unexpected network datagrams. Successfully exploiting this issue allows remote attackers to crash affected...

Nortel UNIStim IP Phone - Remote Ping Denial of Service

Nortel UNIStim IP Phone - Remote Ping Denial of Service source: https://www.securityfocus.com/bid/28004/info Nortel UNIStim IP Phone products are prone to a remote denial-of-service vulnerability because the software fails to properly handle unexpected network datagrams. Successfully exploiting...

LANDesk Ping Discovery Service Detection

The remote service is a Ping Discovery Service, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29993; scriptversion"1.11";...

CCProxy Telnet Proxy Ping remote stack overflow analysis-vulnerability warning-the black bar safety net

By: mad Dog-B. C. T Simple to understand a bit of the vulnerability reason, the problem lies in the ping, the first to trigger this vulnerability see the effect. Turn on the CC, and then telnet 127.0.0.1 2 3, appeared the following tips CCProxy TelnetCCProxy Telnet Service Ready. CCProxy Telnet...

Unfixed XSS vulnerability at www.xentek.co.uk

Security researcher T-Ping, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting www.xentek.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is currently...

CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

Unfixed XSS vulnerability at darksidecommunity.eu

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting darksidecommunity.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currentl...

Unfixed XSS vulnerability at www.webx.tv

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.webx.tv, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.maxsoft.ir

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.maxsoft.ir, which at the time of submission ranked 3699424 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currentl...

Unfixed XSS vulnerability at www.h-o-m-e-p-a-g-e.info

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.h-o-m-e-p-a-g-e.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is...

Unfixed XSS vulnerability at mail.unbreakable.ch

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting mail.unbreakable.ch, which at the time of submission ranked 7360714 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

PT-2007-4307

Name of the Vulnerable Software and Affected Versions Alcatel OmniPCX Enterprise Communication Server versions prior to R7.1 Description The masterCGI component within the Unified Maintenance Tool contains a flaw that allows remote attackers to execute arbitrary commands. This occurs when shell...