7332 matches found
CVE-2013-3461
CVE-2013-3461 affects Cisco Unified Communications Manager (CUCM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1). The vulnerability is a DoS caused by insufficient rate limiting of SIP traffic, allowing remote attackers to flood UDP 5060 and exhaust memory/CPU, leading to service disru...
DEBIAN-CVE-2013-4163
The ip6appenddatamtu function in net/ipv6/ip6output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6MTU setsockopt option had been specified, which allows local users to cause a denial of service BUG and system crash via...
UBUNTU-CVE-2013-4163
The ip6appenddatamtu function in net/ipv6/ip6output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6MTU setsockopt option had been specified, which allows local users to cause a denial of service BUG and system crash via...
Cisco IOS GET VPN Encryption Policy Bypass Vulnerability
A vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature of Cisco IOS could allow traffic to bypass the configured encryption policy. The vulnerability is due to the default, implicit policies set in place to permit Group Domain of Interpretation GDOI traffic to flow unencrypted...
CVE-2013-3436
The default configuration of the Group Encrypted Transport VPN GET VPN feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation GDOI traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui076...
Default configuration
The default configuration of the Group Encrypted Transport VPN GET VPN feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation GDOI traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui076...
rpcbind CALLIT UDP Crash
!/usr/bin/ruby rpcbindudpcrashpoc.rb 07/15/2013 Sean Verity CVE 2013-1950 rpcbind CALLIT Procedure UDP Crash PoC Affected Software Package: rpcbind-0.2.0-19 Tested on: Fedora 17 3.9.8-100.fc17.x8664 1 SMP CentOS 6.3 Final 2.6.32-279.22.1.el6.x8664 1 SMP rpcbind can be crashed by setting the...
rpcbind - CALLIT procedure UDP Crash (PoC)
!/usr/bin/ruby rpcbindudpcrashpoc.rb 07/15/2013 Sean Verity CVE 2013-1950 rpcbind CALLIT Procedure UDP Crash PoC Affected Software Package: rpcbind-0.2.0-19 Tested on: Fedora 17 3.9.8-100.fc17.x8664 1 SMP CentOS 6.3 Final 2.6.32-279.22.1.el6.x8664 1 SMP rpcbind can be crashed by setting the...
rpcbind - CALLIT procedure UDP Crash (PoC)
rpcbind - CALLIT procedure UDP Crash PoC !/usr/bin/ruby rpcbindudpcrashpoc.rb 07/15/2013 Sean Verity CVE 2013-1950 rpcbind CALLIT Procedure UDP Crash PoC Affected Software Package: rpcbind-0.2.0-19 Tested on: Fedora 17 3.9.8-100.fc17.x8664 1 SMP CentOS 6.3 Final 2.6.32-279.22.1.el6.x8664 1 SMP...
rpcbind (CALLIT Procedure) UDP Crash PoC
rpcbind CALLIT procedure UDP denial of service proof of concept exploit. !/usr/bin/ruby rpcbindudpcrashpoc.rb 07/15/2013 Sean Verity CVE 2013-1950 rpcbind CALLIT Procedure UDP Crash PoC Affected Software Package: rpcbind-0.2.0-19 Tested on: Fedora 17 3.9.8-100.fc17.x8664 1 SMP CentOS 6.3 Final...
SuSE 11.2 / 11.3 Security Update : krb5 (SAT Patch Numbers 7962 / 7968)
This krb5 update fixes a security issue. - kpasswd UDP ping-pong bug825985 / CVE-2002-2443 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...
Oracle Linux 5 / 6 : java-1.6.0-openjdk (ELSA-2011-1380)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1380 advisory. 1:1.6.0.0-1.40.1.9.10 - Resolves: rhbz744788 - Bumped to IcedTea6 1.9.8 -removed font copying Security fixes - S7000600, CVE-2011-3547: InputStream...
Oracle Linux 5 : dnsmasq (ELSA-2008-0789)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2008-0789 advisory. - fixes for CVE-2008-1447/CERT VU800113 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...
teamspeak2-version NSE Script
Detects the TeamSpeak 2 voice communication server and attempts to determine version and configuration information. A single UDP packet a login request is sent. If the server does not have a password set, the exact version, name, and OS type will also be reported on. Example Usage nmap -sU -sV -p...
IPMI Information Discovery
Discover host information through IPMI Channel Auth probes This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IPMI Information Discovery', 'Description' = 'Discover host information through IPMI...
MIT Kerberos 5 kpasswd UDP Packet DoS Vulnerability
MIT Kerberos is prone to a denial of service DoS vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...
MIT Kerberos 5 kpasswd UDP Packet Denial Of Service Vulnerability
This host is running MIT Kerberos and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbmitkrb5kpasswdpingpongdosvuln.nasl 8236 2017-12-22 10:28:23Z cfischer $ MIT Kerberos 5 kpasswd UDP Packet Denial Of Service Vulnerability Authors: Veerendra G.G Copyright: Copyrigh...
krb5: UDP ping-pong flaw in kpasswd
schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 aka krb5 before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged packet that triggers a communication loop, as...
Cisco Hosted Collaboration Mediation Excessive CPU Utilization Vulnerability
A vulnerability in the network stack of Cisco Hosted Collaboration Mediation could allow an unauthenticated, remote attacker to cause excessive CPU utilization on the affected system. The vulnerability is due to insufficient optimization of resources when the affected system is flooded with...