HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 51...

HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the dbman.exe component which listens by default on UDP port 2810. Wh...

HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...

HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...

Cisco IOS UDP flood DoS

UDP packets flooding leads to CPU exhaustion...

Cisco IOS UDP Denial of Service Vulnerability

Cisco IOS UDP Denial of Service Vulnerability ------------------------------------------------------------------ I. Summary Cisco routers running IOS 15.0 allows a remote attacker to cause a denial of service via a flood of UDP packets a randomly chosen UDP port...

broadcast-avahi-dos NSE Script

Attempts to discover hosts in the local network using the DNS Service Discovery protocol and sends a NULL UDP packet to each host to test if it is vulnerable to the Avahi NULL UDP packet denial of service CVE-2011-1002. The broadcast-avahi-dos.wait script argument specifies how many number of...

Squid WCCP Message Receive Buffer Overflow (CVE-2005-0211)

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. An attacker can exploit this vulnerability to terminate the vulnerable product, creating a denial of service condition, or it can be exploited for code. A remote vulnerability was found in Squid web proxy/cache processes...

[SECURITY] [DSA 2225-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2225-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 25, 2011 http://www.debian.org/security/faq -...

Nortel CS1000 Communications Server Remote Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of Nortel CS1000 Communication Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the process listening on UDP port 5100. When parsing ...

THC-Amap v5.3 - application protocol detection Released , Download Now !

THC-Amap v5.3 - application protocol detection Released , Download Now ! Amap was innovative - the first tool to perform application protocol detection. Then a better approach was implemented into nmap, this and the large user base of nmap made amap pretty much obsolete. So today, I recommend to...

avahi security update

CentOS Errata and Security Advisory CESA-2011:0436 Updated avahi packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base scor...

Microsoft Host Integration Server多个拒绝服务漏洞

Bugtraq ID: 47315 Microsoft Host Integration Server是一款主机平台互通解决方案。 -使用TCP协议的如1478端口上的snabase.exe，使用动态端口的snalink.exe，snaservr.exe, mngagent.exe等，"wordpacket - 2"可使应用程序进入无限循环，持续解析相同数据。 -访问最大0x1ee字节报文之后的未分配内存可导致进程崩溃。 -超过0x1ee字节的UDP报文可阻止接收任何其他UDP报文。 -字符串过大可导致异常。 -如果字符串超过0x10字节，服务器会触发异常终止。 Microsoft Ho...

Wireshark 1.5.1 Development Release !

Wireshark 1.5.1 Development Release ! Wireshark 1.5.1 has been released. Installers for Windows, OS X, and source code are now available. New and Updated Features The following features are new or have been significantly updated since version 1.4: 1. Wireshark can import text dumps, similar to...

Microsoft Host Integration Server 8.5.4224.0 - Denial of Service

Source: http://aluigi.org/adv/snabase1-adv.txt Luigi Auriemma Application: Microsoft Host Integration Server http://www.microsoft.com/biztalk/en/us/host-integration.aspx?pf=true Versions: = 8.5.4224.0 Platforms: Windows Bugs: various Denial of Service vulnerabilities Exploitation: remote, versus...

Microsoft Host Integration Server 8.5.4224.0 - Denial of Service

Microsoft Host Integration Server 8.5.4224.0 - Denial of Service Source: http://aluigi.org/adv/snabase1-adv.txt Luigi Auriemma Application: Microsoft Host Integration Server http://www.microsoft.com/biztalk/en/us/host-integration.aspx?pf=true Versions: = 8.5.4224.0 Platforms: Windows Bugs: variou...

Detect RPC over UDP

This service answered to a RPC procedure 0 call. For whatever reason, it was not registered by the portmapper or Nessus could not query to the portmapper e.g. if port 111 is filtered or not scanned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Accellion File Transfer Appliance MPIPE2 Command Execution

$Id: accellionftampipe2.rb 11935 2011-03-11 17:37:23Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Accellion File Transfer Appliance MPIPE2 - Command Execution (Metasploit)

$Id: accellionftampipe2.rb 11935 2011-03-11 17:37:23Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Debian: Security Advisory (DSA-2174-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...