Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...

Ipswitch WS_FTP Server < 6.1.1 Multiple Vulnerabilities

The remote host is running a version of WSFTP earlier than 6.1.1. Such versions are reportedly affected by multiple vulnerabilities : - Improper handling of UDP packets within the FTP log server may allow an attacker to crash the affected service. CVE-2008-0608 - There is a buffer overflow...

Ipswitch WS_FTP Server < 6.1.1 Multiple Vulnerabilities (uncredentialed check)

According to its banner, the remote host is running a version of WSFTP earlier than 6.1.1. Such versions are reportedly affected by multiple vulnerabilities : - Improper handling of UDP packets within the FTP log server may allow an attacker to crash the affected service. CVE-2008-0608 - There is...

Microsoft Windows WINS Server网络报文堆溢出漏洞（MS09-039）

BUGTRAQ ID: 35980 CVECAN ID: CVE-2009-1923 Microsoft Windows是微软发布的非常流行的操作系统。 Windows服务器上的WINS.exe进程用于为NetBIOS网络提供名称解析服务。在解析push请求时WINS服务将报文数据拷贝到了静态的堆缓冲区上。如果远程攻击者提供了特制的请求，就可以触发堆溢出，导致以SYSTEM权限执行任意代码。 Microsoft Windows Server 2003 SP2 Microsoft Windows 2000 Server SP4 临时解决方法： 在防火墙上屏蔽TCP 42和UDP 42端口。...

Microsoft Windows WINS Server网络报文整数溢出漏洞（MS09-039）

BUGTRAQ ID: 35981 CVECAN ID: CVE-2009-1924 Microsoft Windows是微软发布的非常流行的操作系统。 Windows服务器上的WINS.exe进程用于为NetBIOS网络提供名称解析服务。在从受信任的WINS复制伙伴收到特制WINS报文中时没有充分验证数据结构，如果远程攻击者提供了特制的请求，就可以触发整数溢出，导致以SYSTEM权限执行任意代码。 Microsoft Windows 2000 Server SP4 临时解决方法： 在防火墙上屏蔽TCP 42和UDP 42端口。 厂商补丁： Microsoft ---------...

DB2 Discovery Service Detection

This module simply queries the DB2 discovery service for information. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DB2 Discovery Service Detection', 'Description' = 'This module simply queri...

bind security and bug fix update

20:9.2.4-25.el3 - security fix for remote DoS CVE-2009-0696, 514292 20:9.2.4-24.el3 - abort timeout queries to reduce the number of open UDP sockets 498164 - handle EMFILE error from accept gracefully 498164...

OpenH323 Opal SIP Protocol Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== OpenH323 Opal SIP Protocol Remote Denial of Service Exploit =========================================================== !/usr/bin/env python OpenH323 Opal SIP Protocol Remote Denial of...

OpenH323 Opal SIP Protocol - Remote Denial of Service

!/usr/bin/env python OpenH323 Opal SIP Protocol Remote Denial of Service Vulnerability CVE-2007-4924 opal228dos.py by Jose Miguel Esparza 2007-10-08 S21sec labs import sys,socket if lensys.argv != 3: sys.exit"Usage: " + sys.argv0 + " targethost targetport\n" target = sys.argv1 targetPort =...

Ekiga 2.0.5 - 'GetHostAddress' Remote Denial of Service

!/usr/bin/env python Ekiga GetHostAddress Remote Denial of Service Vulnerability CVE-2007-4897 ekiga207dos.py by Jose Miguel Esparza 2007-09-11 S21sec labs import sys,socket if lensys.argv != 3: sys.exit"Usage: " + sys.argv0 + " targethost targetport\n" target = sys.argv1 targetPort = intsys.argv...

openSUSE Security Update : dnsmasq (dnsmasq-147)

This update of dnsmasq uses random UDP source ports and a random TRXID now. CVE-2008-1447 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dnsmasq-147. The text description of this plugin is C...

openSUSE Security Update : openswan (openswan-687)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon CVE-2009-0790. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openswan-687. The...

Microsoft DNS Server Internal Hostname Disclosure Detection

Microsoft DNS server might be prone to an internal hostname disclosure. SPDX-FileCopyrightText: 2009 Tim Brown Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2297

Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv90 through snv108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service panic via unspecified vectors involving the crgetlabel function, related to a "TX...

CVE-2009-2297

Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv90 through snv108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service panic via unspecified vectors involving the crgetlabel function, related to a "TX...

RIP-1 Poisoning Routing Table Modification

This host is running a RIP-1 agent. RIP-1 does not implement authentication. An attacker on the same network may feed the target machine bogus routes and hijack network connections. Note that Nessus cannot test this flaw as it is not running on the same network. C Tenable Network Security, Inc...

Green Dam Change System Time

// Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl; std::cerr "Example: testgd 192.168.0.12...

Green Dam - Remote Change System Time

// Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl; std::cerr "Example: testgd 192.168.0.12...

Green Dam - Remote Change System Time

Green Dam - Remote Change System Time // Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl;...

CVE-2009-2045

The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, allows remote attackers to cause a denial of service reboot via a malformed payload in a UDP packet to port 37000, related ...