Design/Logic Flaw

The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows remote attackers to cause a denial of service in.iked daemon crash by sending certain UDP packets with a source port different from 500. NOTE: this issue might overlap CVE-2006-22...

LANDesk Management Suite Alert Service Stack Overflow (CVE-2007-1674)

LANDesk Management Suite automates systems and security management tasks and proactively manages, updates and protects desktops, servers and mobile devices from a single console. A stack buffer overflow vulnerability has been discovered in LANDesk Management Suite. The vulnerability is due to a...

CVE-2007-1728

The Remote Play feature in Sony Playstation 3 PS3 1.60 and Playstation Portable PSP 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets...

CVE-2007-1728

The Remote Play feature in Sony Playstation 3 PS3 1.60 and Playstation Portable PSP 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets...

CVE-2007-1398

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ipconntrack module loaded, allows remote attackers to cause a denial of service segmentation fault and application crash via certain UDP packets produced by sendmorefragpacket and...

Code injection

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ipconntrack module loaded, allows remote attackers to cause a denial of service segmentation fault and application crash via certain UDP packets produced by sendmorefragpacket and...

CVE-2007-1398

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ipconntrack module loaded, allows remote attackers to cause a denial of service segmentation fault and application crash via certain UDP packets produced by sendmorefragpacket and...

CVE-2006-4194

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

CVE-2006-4194

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

IAXClient Open Source Library iax_net_read Function Packet Handling Remote Overflow

The remote host appears to be using a VoIP software phone application that is affected by multiple buffer overflows. With specially crafted UDP packets, an unauthenticated, remote attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the...

[Full-disclosure] Denial of service bugs in OpenTTD 0.4.7

Luigi Auriemma Application: OpenTTD http://www.openttd.org Versions: = 0.4.7 Platforms: Windows, nix, BSD, Mac and others Bugs: A program termination through big error number B broadcast clients disconnection in multiplayer menu Exploitation: A remote, versus server and client in-game B remote,...

CVE-2005-4723

D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service device reboot via a series of crafted fragmented UDP packets, possibly involving a missing fragment...

D-Link / US Robotics multiple wireless access points DoS

Fragmented sequential UDP packets causes device to reboot...

CA DM Deployment Common Component Multiple DoS

The remote version of DMPrimer service CA DM Deployment Common Component is vulnerable to multiple Denial of Service attacks. An attacker can crash or may cause a high CPU utilization by sending a specially crafted UDP packets. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

Ubuntu 4.10 : squid vulnerabilities (USN-67-1)

infamous41md discovered several Denial of Service vulnerabilities in squid. A malicious Gopher server could crash squid by sending a line bigger than 4096 bytes. CAN-2005-0094 If squid is configured to send WCPP Web Cache Communication Protocol messages to a 'home router', an attacker who was abl...

CVE-2005-4723

D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service device reboot via a series of crafted fragmented UDP packets, possibly involving a missing fragment...

Do not think that the installation of a firewall,I political don't you-vulnerability warning-the black bar safety net

How to make tcp packets and udp packets through the firewall by this article httptunnel technology At the same time escaped the firewall shield, as well as the system's tracking test, we can seeNetworksafe to rely only on some or a few of the means are unreliable, while the security system of bli...

Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow

Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow / THCsnortbo 0.3 - Snort BackOrifice PING exploit by [email protected] THC PUBLIC SOURCE MATERIALS Bug was found by Internet Security Systems http://xforce.iss.net/xforce/alerts/id/207 v0.3 - removed/cleaned up info for public release v0.2 -...

Snort <= 2.4.2 Back Orifice Parsing Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ================================================================== Snort $Id: THCsnortbo.c,v 1.1 2005/10/24 11:38:59 thccvs Exp $ / / DETAILS The bug is in sppbo.c, BoGetDirection function static int BoGetDirectionPacket p, char pktdata uint3...

Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow

/ THCsnortbo 0.3 - Snort BackOrifice PING exploit by [email protected] THC PUBLIC SOURCE MATERIALS Bug was found by Internet Security Systems http://xforce.iss.net/xforce/alerts/id/207 v0.3 - removed/cleaned up info for public release v0.2 - details added, minor changes v0.1 - first release Greetz to al...