Design/Logic Flaw

Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service CPU consumption via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756...

CVE-2013-3381

Cisco Hosted Collaboration Mediation is affected by CVE-2013-3381. The vulnerability allows an unauthenticated, remote attacker to cause excessive CPU utilization by sending malformed UDP packets to UDP port 162. The underlying issue is insufficient optimization of resources when flooded with mal...

krb5 security update

1.10.3-10.3 - pull up fix for UDP ping-pong flaw in kpasswd service CVE-2002-2443,...

[SECURITY] Fedora 19 Update: socat-1.7.2.2-1.fc19

Socat is a relay for bidirectional data transfer between two independent da ta channels. Each of these data channels may be a file, pipe, device serial l ine etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc.,...

Quick TFTP Server Pro 2.2 - Denial of Service

Quick TFTP Server Pro 2.2 - Denial of Service !/usr/bin/python Exploit Title: Quick TFTP Server 2.2 DoS Date: 6th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Exploit Author Write Up:...

MGASA-2013-0161 Updated krb5 packages fix security vulnerability

The kpasswd service provided by kadmind was vulnerable to a UDP ping-pong attack CVE-2002-2443...

Updated krb5 packages fix security vulnerability

The kpasswd service provided by kadmind was vulnerable to a UDP ping-pong attack CVE-2002-2443...

OpenVPN cryptography weakness

It's possible to inject and decript ciphertext in UDP mode...

FreeBSD : krb5 -- UDP ping-pong vulnerability in the kpasswd (password changing) service. [CVE-2002-2443] (e3f64457-cccd-11e2-af76-206a8a720317)

No advisory has been released yet. schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 aka krb5 before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged packet that...

Debian DSA-2701-1 : krb5 - denial of service

It was discovered that the kpasswd service running on UDP port 464 could respond to response packets, creating a packet loop and a denial of service condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

[SECURITY] [DSA 2701-1] krb5 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2701-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 29, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2701-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2701-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 29, 2013 http://www.debian.org/security/faq -...

DSA-2701-1 krb5 - denial of service

Bulletin has no description...

Veeam Management Pack v6 Required Ports and Permissions

Solution Required Permissions Connection to Virtual Servers VI Object | Required Permissions ---|--- vCenter, ESXi Host | Read-Only1 Host.CIM.CIM Interaction2 Datastore.Browse Datastore3 Datastore.Configure Datastore3 Datastore Cluster.Browse Datastore Cluster3 1 Minimum required permission over...

Cisco IOS XR Software SNMP拒绝服务漏洞

BUGTRAQ ID: 60153 CVECAN ID: CVE-2013-1204 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS XR在SNMP进程中存在安全漏洞，可使未经身份验证的远程攻击者重新加载受影响进程并泄露部分内存信息。此漏洞源于没有释放已经分配的内存。攻击者通过发送大量的UDP报文到SNMP端口162上可触发此漏洞。 0 Cisco IOS XR 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-1204）以及相应补丁: CVE-2013-1204：Cisco IOS XR...

CVE-2013-1213

Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module VEM to a Virtual Supervisor Module VSM, which allows remote attackers to cause a denial of service false VEM unavailability report via a flood of UDP packets, aka Bug ID...

CVE-2013-1213

Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module VEM to a Virtual Supervisor Module VSM, which allows remote attackers to cause a denial of service false VEM unavailability report via a flood of UDP packets, aka Bug ID...

CVE-2013-1213

CVE-2013-1213 affects Cisco NX-OS on the Nexus 1000V, where heartbeat messages between a Virtual Ethernet Module (VEM) and a Virtual Supervisor Module (VSM) are not given proper priority. This can be exploited by an attacker via a UDP flood to trigger a DoS through false VEM unavailability report...

Cisco Nexus 1000V VSM/VEM Heartbeat Denial of Service Vulnerability

A vulnerability in the Cisco Nexus 1000V could allow an unauthenticated, remote attacker to cause a Virtual Supervisor Module VSM to report a Virtual Ethernet Module VEM as unavailable. The vulnerability is due to insufficient prioritization for VSM/VEM heartbeat messages. An attacker could explo...

CVE-2002-2443

schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 aka krb5 before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged packet that triggers a communication loop, as...