tcpdump buffer overflow vulnerability (CNVD-2017-02285)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the print-geonet.c file ...

tcpdump buffer overflow vulnerability (CNVD-2017-02332)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the arpprint function of...

tcpdump buffer overflow vulnerability (CNVD-2017-02329)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the ethertypeprint...

tcpdump buffer overflow vulnerability (CNVD-2017-02327)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the ipcompprint function...

DEBIAN-CVE-2016-5031

The printframeinstbytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

UBUNTU-CVE-2016-5033

The printexprloccontent function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

Design/Logic Flaw

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

CVE-2017-5634

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

Tcpdump Multiple Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. A buffer overflow vulnerability in Tcpdump's multiple parsers print-ether.c:etherprint allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...

Tcpdump SNMP Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. Tcpdump SNMP parser print-snmp.c:asn1parse suffers from a buffer overflow vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...

Insanity-Framework - Generate Payloads and control Remote Machines

With the dynamics of persuasion that prove effective in a pentest, several painstaking means of making a payload has emerged, Insanity Framework provides speed and effectiveness in a single tool to help you work. Features Bypass most AV and Sandboxes. Remote Control. Payload Generation. Some...

Internet Bug Bounty: CVE-2017-5342 In tcpdump before 4.9.0 a bug in multiple protocol parsers could cause a buffer overflow in print-ether.c:ether_print()

Reported to the project maintainers in 2016. greprint0 and the functions modelled after it passed the value of "length" instead of the value of "caplen", this could make etherprint access beyond the memory allocated for the captured packet. Fixed by...

Printer Exploitation Toolkit: PRET

Printer Exploitation Toolkit PRET is a new tool for printer security testing developed in the scope of a Master’s Thesis at Ruhr University Bochum. PRET connects to a device via network or USB and exploits the features of a given printer language. Currently PostScript , PJL and PCL are supported...

Flaws Found in Popular Printer Models

Vulnerabilities in popular printer models made by HP, Dell and Lexmark expose the devices to attackers who can steal passwords, shut down printers and even steal print jobs. Academic researchers at the University Alliance Ruhr on Monday published a series of advisories and an informational wiki...

Hacking Printers Advisory 1

TL;DR: In the scope of academic research on printer security, various vulnerabilities in network printers and MFPs have been discovered. This is advisory 1 of 6 of the Hacking Printers' series. Each advisory discusses multiple issues of the same category. This post is about manipulating and...

CVE-2017-5483

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...

DEBIAN-CVE-2017-5205

The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2eprint...

CVE-2017-5484

The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sigprint...

CVE-2016-8575

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2017-5482...

ALPINE-CVE-2017-5342

In tcpdump before 4.9.0, a bug in multiple protocol parsers Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE could cause a buffer overflow in print-ether.c:etherprint...