CVE-2007-3491

Buffer overflow in mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attackers to have an unknown impact via a malformed TCP/IP message...

CVE-2007-3491

CVE-2007-3491 concerns a buffer overflow in Progress OpenEdge’s _mprosrv (before 9.1E0422 and before 10.1B01 for 10.x) that can be triggered by a malformed TCP/IP message. The available documents identify the affected component (_mprosrv.exe) and the vulnerable versions, with an remote-access vec...

OpenEdge buffer overflow

Buffer overflow on parsing TCP/IP message...

Openedge _mprosrv buffer overflow

There is a potential for a buffer overflow in the database executable mprosrv while reading a TCP/IP message that is incorrectly formatted. To avoid this problem, additional checking has been added to the mprosrv executable that will prevent incorrectly formatted messages from causing buffer...

CentOS 3 / 4 / 5 : quagga (CESA-2007:0389)

An updated quagga package that fixes a security bug is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga is a TCP/IP based routing software suite. An out of bounds memory read flaw was...

Array overflow in Linux kernel

DecNET dnfibprops and TCP/IP fibprops functions array index overflow...

TCP/IP Timestamps Supported

The remote host implements TCP timestamps, as defined by RFC1323. A side effect of this feature is that the uptime of the remote host can sometimes be computed. TRUSTED...

[SECURITY] Fedora Core 6 Update: samba-3.0.24-5.fc6

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

[SECURITY] Fedora Core 5 Update: samba-3.0.24-5.fc5

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

Destroy TCP/IP-vulnerabilities and early warning-the black bar safety net

The use of a TCP/IP Protocol software vulnerabilities to attack the classic example is the Ping of Death attack. The use of a specific method is,your opponent create a exceeds the IP Standard's maximum length--6 5 5 3 5 bytes of the IP packet. When this"puffy"data packet arrival time,it makes the...

HP-UX ICMP vulnerable to DoS via ICMP Path Maximum Transmission Unit (PMTU) Discovery

Overview A vulnerability in HP-UX may allow a remote attacker to cause a denial of service by sending a specially crafted ICMP packet. Description A number of widely accepted Internet standards describe different aspects of the relationships between the Internet Control Message Protocol ICMP and...

Sun Solaris TCP/IP内核内存破坏拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 使用CMT处理器的Sun Solaris系统在处理超多的快速打开/关闭TCP连接的TCP/IP负载时存在竞争条件问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0 x86 Sun Solaris 10.0 补丁下载： Sun Solaris 10.0 Sun 125100-02 http://sunsolve.sun.com/private-cgi/pdownload.pl?target=125100-02&meth od=h Sun Solaris 10.0 x86 Sun...

CVE-2006-7028

Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service console hang via a flood of small TCP/IP packets. NOTE: this issue has not been replicated by third parties. In addition, the cause is unknown, although it might be related to...

CVE-2006-7028

CVE-2006-7028 pertains to single-CPU Sun systems running Solaris 7–9 (e.g., Netra) where a remote attacker can cause a denial-of-service (console hang) by flooding the device with small TCP/IP packets. The underlying cause is unknown; it may relate to the console receiving a large number of inter...

[SECURITY] Fedora Core 6 Update: samba-3.0.24-1.fc6

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

[SECURITY] Fedora Core 5 Update: samba-3.0.24-1.fc5

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

MOAB-25-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session = webserver.accept randclen = rand80 useragent =...

CVE-2006-6427

The CVE-2006-6427 entry concerns Xerox WorkCentre and WorkCentre Pro web UIs affected by command-injection in the WebUI. Affected versions are before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows remote attackers to execute arbitrary commands vi...

Xerox WorkCentre WebUI远程命令注入漏洞

Xerox WorkCentre是一款数码打印复印一体机。 WorkCentre的TCP/IP主机名存在WebUI命令注入漏洞，允许攻击者绕过认证远程执行任意软件。如果成功利用的话，攻击者可以非授权更改系统配置。 Xerox WorkCentre Pro 275 Xerox WorkCentre Pro 265 Xerox WorkCentre Pro 255 Xerox WorkCentre Pro 245 Xerox WorkCentre Pro 238 Xerox WorkCentre Pro 232 Xerox WorkCentre 275 Xerox WorkCentre 26...

Microsoft Windows MSDTC堆溢出漏洞（MS06-018）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的MSDTC进程处理畸形的DCE-RPC请求时存在漏洞，远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击。 在MSDTC.EXE进程中MSDTCPRX.DLL起到了RPC Server的作用，使用动态TCP端口做为其RPC端点，906B0CE0-C70B-1067-B317-00DD010662DA...