[Full-disclosure] Buffer-overflow and crash in Fenice OMS 1.10

Luigi Auriemma Application: Fenice - Open Media Streaming Server http://streaming.polito.it/server Versions: = 1.10 and current SVN 2005-07-26 Platforms: nix, BSD and others Bugs: A buffer-overflow in parseurl B crash in RTSPmsglen Exploitation: remote Date: 23 Apr 2006 Author: Luigi Auriemma...

Ubuntu 4.10 / 5.04 : xine-lib vulnerabilities (USN-123-1)

Two buffer overflows have been discovered in the MMS and Real RTSP stream handlers of the Xine library. By tricking a user to connect to a malicious MMS or RTSP video/audio stream source with an application that uses this library, an attacker could crash the client and possibly even execute...

Ubuntu 4.10 : xine-lib vulnerabilities (USN-42-1)

Several buffer overflows have been discovered in xine-lib, the video/audio codec library for Xine frontends xine-ui, totem-xine, kaffeine, and others. If an attacker tricked a user into loading a malicious RTSP stream or a stream with specially crafted AIFF audio or PNM image data, they could...

CVE-2005-4425

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service crash via certain RTSP streams...

CVE-2005-4425

Kerio WinRoute Firewall prior to version 6.1.3 is affected by a vulnerability that allows remote attackers to cause a denial of service (crash) via certain RTSP streams. The issue appears in the version range before 6.1.3; exact root cause is not detailed in the provided documents. Public referen...

CVE-2005-4425

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service crash via certain RTSP streams...

CVE-2005-4425: Undefined Security Weakness

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service crash via certain RTSP streams...

CVE-2004-2543

The CVE-2004-2543 entry concerns Secure Computing Corporation Sidewinder G2 6.1.0.01. It describes a potential remote DoS where an attacker can trigger a proxy failure by sending invalid traffic to the T.120 or RTSP proxy, or sending invalid MIME messages to the mail filter. The note indicates th...

CVE-2004-2543

Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service proxy failure via invalid traffic to the 1 T.120 or 2 RTSP proxy, or 3 invalid MIME messages to the mail filter. NOTE: this might not be a vulnerability because the embedded monitoring...

CVE-2004-2543: Undefined Security Weakness

Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service proxy failure via invalid traffic to the 1 T.120 or 2 RTSP proxy, or 3 invalid MIME messages to the mail filter. NOTE: this might not be a vulnerability because the embedded monitoring...

Multiple Kerio WinRoute Firewall vulnerabilities

Crash on RTSP streams processing, possibility to use disabled account...

[SA17519] Kerio WinRoute Firewall Potential Denial of Service and Security Bypass

TITLE: Kerio WinRoute Firewall Potential Denial of Service and Security Bypass SECUNIA ADVISORY ID: SA17519 VERIFY ADVISORY: http://secunia.com/advisories/17519/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From remote SOFTWARE: Kerio WinRoute Firewall 6.x...

RTSP Server Type And Version Detection

Detection of the Real-Time Streaming Protocol RTSP Server SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[Full-disclosure] APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce

APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce By Sowhat 2005.07.13 http://secway.org/Advisory/AD20050713.txt Vendor Apple Inc. Product Affected Darwin Streaming Server 5.5 and below for Win32 CVE-ID: CAN-2005-2195 OverView: Darwin Streaming Server is server technology allowing...

FreeBSD : libxine -- multiple buffer overflows in RTSP (1b70bef4-649f-11d9-a30e-000a95bc6fae)

A xine security announcement states : Multiple vulnerabilities have been found and fixed in the Real-Time Streaming Protocol RTSP client for RealNetworks servers, including a series of potentially remotely exploitable buffer overflows. This is a joint advisory by the MPlayer and xine teams as the...

FreeBSD : mplayer -- multiple vulnerabilities (85d76f02-5380-11d9-a9e7-0001020eed82)

iDEFENSE and the MPlayer Team have found multiple vulnerabilities in MPlayer : - Potential heap overflow in Real RTSP streaming code - Potential stack overflow in MMST streaming code - Multiple buffer overflows in BMP demuxer - Potential heap overflow in pnm streaming code - Potential buffer...

FreeBSD : mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities (91c606fc-b5d0-11d9-a788-0001020eed82)

A xine security announcement reports : By a user receiving data from a malicious network streaming server, an attacker can overrun a heap buffer, which can, on some systems, lead to or help in executing attacker-chosen malicious code with the permissions of the user running a xine-lib based media...

Mandrake Linux Security Advisory : mplayer (MDKSA-2005:115)

Two heap overflows were discovered in mplayer's code handling the RealMedia RTSP and Microsoft Media Services streams over TCP MMST. These vulnerabilities could allow for a malicious server to execute arbitrary code on the client computer with the permissions of the user running MPlayer. The...

USN-123-1: Xine library vulnerabilities

Two buffer overflows have been discovered in the MMS and Real RTSP stream handlers of the Xine library. By tricking a user to connect to a malicious MMS or RTSP video/audio stream source with an application that uses this library, an attacker could crash the client and possibly even execute...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...