Apple Mac OSX - mDNSResponder UPnP Location Overflow (Metasploit)

$Id: upnplocation.rb 11515 2011-01-08 01:12:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2010-4683

Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...

CVE-2010-4683

Cisco IOS before 15.0(1)XA5 suffers a memory leak that can be triggered by a crafted SIP REGISTER message sent over UDP, potentially causing denial of service due to memory exhaustion (Bug ID CSCtg41733). This vulnerability affects Cisco's IOS environment as described in CVE-2010-4683. The public...

CVE-2010-4683

Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...

Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability

Exploit for multiple platform in category dos / poc !/usr/bin/env python Wireshark ENTTEC DMX Data UDP Buffer Overflow PoC by non-customers crew in 2010 http://rock-madrid.com/ import socket, sys try: host = sys.argv1 except: print "usage: " + sys.argv0 + " " sys.exit2 port = 3333 addr = host, po...

Wireshark - ENTTEC DMX Data RLE Buffer Overflow

source: https://www.securityfocus.com/bid/45634/info !/usr/bin/env python Wireshark ENTTEC DMX Data UDP Buffer Overflow PoC by non-customers crew in 2010 http://rock-madrid.com/ import socket, sys try: host = sys.argv1 except: print "usage: " + sys.argv0 + " " sys.exit2 port = 3333 addr = host,...

Wireshark - ENTTEC DMX Data RLE Buffer Overflow

Wireshark - ENTTEC DMX Data RLE Buffer Overflow source: https://www.securityfocus.com/bid/45634/info !/usr/bin/env python Wireshark ENTTEC DMX Data UDP Buffer Overflow PoC by non-customers crew in 2010 http://rock-madrid.com/ import socket, sys try: host = sys.argv1 except: print "usage: " +...

Wireshark ENTTEC DMX Data RLE Buffer Overflow

!/usr/bin/env python Wireshark ENTTEC DMX Data UDP Buffer Overflow PoC by non-customers crew in 2010 http://rock-madrid.com/ import socket, sys try: host = sys.argv1 except: print "usage: " + sys.argv0 + " " sys.exit2 port = 3333 addr = host, port data = "ESDD\x10\x20\x04" data += "\x00\x0c" data...

CVE-2010-4342

The aunincoming function in net/econet/afeconet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and OOPS by sending an Acorn Universal Networking AUN packet over UDP...

Sql injection

The udpqueuercvskb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux RHEL 5 allows attackers to cause a denial of service deadlock and system hang by sending UDP traffic to a socket that has a crafted socket filter, a related issue to...

Null pointer dereference

The aunincoming function in net/econet/afeconet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and OOPS by sending an Acorn Universal Networking AUN packet over UDP...

CVE-2010-4161

The udpqueuercvskb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux RHEL 5 allows attackers to cause a denial of service deadlock and system hang by sending UDP traffic to a socket that has a crafted socket filter, a related issue to...

CVE-2010-4342

The aunincoming function in net/econet/afeconet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and OOPS by sending an Acorn Universal Networking AUN packet over UDP...

CVE-2010-4161

CVE-2010-4161 affects the Linux kernel 2.6.18 build used by Red Hat Enterprise Linux 5. The issue lies in udp_queue_rcv_skb in net/ipv4/udp.c, where a crafted socket filter and UDP traffic can trigger a denial of service (deadlock/system hang). The related CVE-2010-4158 is referenced. Connected d...

CVE-2010-4161

The udpqueuercvskb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux RHEL 5 allows attackers to cause a denial of service deadlock and system hang by sending UDP traffic to a socket that has a crafted socket filter, a related issue to...

CVE-2010-4342

Vulnerability (CVE-2010-4342) in the Linux kernel affects the AUN path when Econet is enabled. The flaw is in the aun_incoming function (net/econet/af_econet.c) and allows remote attackers to trigger a NULL pointer dereference and kernel OOPS, causing a denial of service via UDP-based Acorn Unive...

CVE-2010-4342

The aunincoming function in net/econet/afeconet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and OOPS by sending an Acorn Universal Networking AUN packet over UDP...

SNMP Windows Username Enumeration

This module will use LanManager/psProcessUsername OID values to enumerate local user accounts on a Windows/Solaris system via SNMP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SNMP Windows...

BMC SNMP Agent Default Community Name (public)

The remote SNMP server, listening on port 8161 probably part of BMC Patrol has a community name set to 'public'. An attacker may use this information to gain more knowledge about the remote host or to change the configuration of the remote system if the default community allow such modifications....

Novell ZENWorks Remote Management Agent DN Name Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENWorks. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ZenRem32.exe process which listens by default on TCP and UDP ports 1761. When...