Buffer overflow

Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in...

CVE-2012-2091

Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in...

CVE-2012-2091

Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in...

Edimax IC-3030iWn - UDP Packet Password Information Disclosure

Edimax IC-3030iWn - UDP Packet Password Information Disclosure source: https://www.securityfocus.com/bid/54006/info Edimax IC-3030iWn is prone to an information-disclosure vulnerability. Successful exploits will allow a remote attacker to gain access to sensitive information. Information obtained...

SuSE 10 Security Update : Linux kernel (x86_64) (ZYPP Patch Number 2096)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

Novell Netware XNFS.NLM STAT Notify Remote Code Execution

Application: Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-07 PRL: 2012-01 Author: Francis Provencher Protek Research Lab's Website:...

Beckhoff TwinCAT SCADA PLC 2.11.0.2004 DoS

The Beckhoff TwinCAT version use auxiliary/dos/scada/beckhoff/twincat msf undefinedtwincat show actions ...actions... msf undefinedtwincat set ACTION msf undefinedtwincat show options ...show and set options... msf undefinedtwincat run This module requires Metasploit:...

CVE-2011-2961

Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UDP packet...

CVE-2011-2961

Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UDP packet...

Heap overflow

Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UDP packet...

CVE-2011-2961

AngelServer.exe 6.0.11.3 on Sunway pNetPower is affected by a heap-based buffer overflow triggered by a crafted UDP packet, enabling remote denial of service and possibly arbitrary code execution. The Red Hat/NVD entries corroborate the issue and identify the root cause as a heap overflow in Ange...

CVE-2011-2961

Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UDP packet...

RXS-3211 IP Camera - UDP Packet Password Information Disclosure

RXS-3211 IP Camera - UDP Packet Password Information Disclosure source: https://www.securityfocus.com/bid/47976/info The RXS-3211 IP camera is prone to an information-disclosure vulnerability. Successful exploits will allow a remote attacker to gain access to sensitive information. Information...

avahi security update

CentOS Errata and Security Advisory CESA-2011:0436 Updated avahi packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base scor...

Microsoft Host Integration Server多个拒绝服务漏洞

Bugtraq ID: 47315 Microsoft Host Integration Server是一款主机平台互通解决方案。 -使用TCP协议的如1478端口上的snabase.exe，使用动态端口的snalink.exe，snaservr.exe, mngagent.exe等，"wordpacket - 2"可使应用程序进入无限循环，持续解析相同数据。 -访问最大0x1ee字节报文之后的未分配内存可导致进程崩溃。 -超过0x1ee字节的UDP报文可阻止接收任何其他UDP报文。 -字符串过大可导致异常。 -如果字符串超过0x10字节，服务器会触发异常终止。 Microsoft Ho...

Debian: Security Advisory (DSA-2174-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2174-1 : avahi - denial of service

It was discovered that Avahi, an implementation of the zeroconf protocol, can be crashed remotely by a single UDP packet, which may result in a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Mandriva Update for avahi MDVSA-2011:037 (avahi)

Check for the Version of avahi OpenVAS Vulnerability Test Mandriva Update for avahi MDVSA-2011:037 avahi Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2011-0389

Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service process crash via a crafted Real-Time Transport Control Protocol RTCP UDP packet, aka Bug ID CSCth60993...

Code injection

Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service process crash via a crafted Real-Time Transport Control Protocol RTCP UDP packet, aka Bug ID CSCth60993...