Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020004 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020004 GetBootRecordRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020006 GetObjetsRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...

Dropbox Software Detection (uncredentialed check)

Dropbox is installed on the remote host. Dropbox is an application for storing and synchronizing files between computers, possibly outside the organization. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if NASLLEVEL 4400 exit1, "'bpfopen' first appeared in Nessus 4.4.0.";...

Critical: java-1.6.0-openjdk

Issue Overview: A flaw was found in the Java RMI Remote Method Invocation registry implementation. A remote RMI client could use this flaw to execute arbitrary code on the RMI server running the registry. CVE-2011-3556 A flaw was found in the Java RMI registry implementation. A remote RMI client...

Torsocks 1.2 Released - Socks friendly ssh and irssi with Tor

Torsocks 1.2 Released - Socks friendly ssh and irssi with Tor Torsocks is an application for Linux, BSD and Mac OSX that allows you to use network applications such as ssh and irssi with Tor. Torsocks allows you to use most socks-friendly applications in a safe way with Tor. It ensures that DNS...

Torsocks 1.2 Released - Socks friendly ssh and irssi with Tor

Torsocks 1.2 Released - Socks friendly ssh and irssi with Tor Torsocks is an application for Linux, BSD and Mac OSX that allows you to use network applications such as ssh and irssi with Tor. Torsocks allows you to use most socks-friendly applications in a safe way with Tor. It ensures that DNS...

Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20111005-asa)

The remote Cisco ASA is missing a security patch and may be affected by the following issues : - When MSN IM inspection is enabled, inspecting malformed transit traffic could cause the device to reload. CVE-2011-3304 - TACACS+ authentication can be bypassed by an attacker with access between the...

CVE-2011-2042

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018...

Design/Logic Flaw

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018...

CVE-2011-2042

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018...

RHEL 5 / 6 : java-1.6.0-openjdk (RHSA-2011:1380)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1380 advisory. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. A flaw was found in the Java R...

CVE-2011-2007

Microsoft Host Integration Server HIS 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service SNA Server service outage via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."...

Design/Logic Flaw

Microsoft Host Integration Server HIS 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service SNA Server service outage via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."...

Design/Logic Flaw

Microsoft Host Integration Server HIS 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service SNA Server service outage via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."...

CVE-2011-2007

CVE-2011-2007 affects Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010. The vulnerability allows remote attackers to cause a denial of service (SNA Server service outage) by sending crafted TCP or UDP traffic, described as an “Endless Loop DoS in snabase.exe Vulnerabilit...

Microsoft Host Integration Server SNA Protocol Denial of Service (MS11-082; CVE-2011-2007)

Multiple denial of service vulnerabilities have been reported in Microsoft Host Integration Server HIS. The vulnerabilities are due to an error in the way Microsoft HIS handles UDP and TCP traffic. A remote attacker may exploit these vulnerabilities by sending a specially crafted packet to an...

MS11-082: Vulnerabilities in Host Integration Server could allow denial of service: October 11, 2011

Resolves vulnerabilities in Host Integration Server that could allow denial of service if a remote attacker sent specially crafted network packets to a Host Integration Server listening on UDP port 1478 or TCP ports 1477 and 1478.INTRODUCTIONMicrosoft has released security bulletin MS11-082. To...

CVE-2011-3280

Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service memory consumption or device reload by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCtj04672...

CVE-2011-3278

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCti48483...

CVE-2011-3279

The provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload via a malformed SIP packet to UDP port 5060, aka Bug ID CSCti98219...