CVE-2007-2344

The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service daemon crash via a UDP packet that contains an invalid "packet type" field...

CVE-2007-2344

The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service daemon crash via a UDP packet that contains an invalid "packet type" field...

CVE-2007-2297

The SIP channel driver chansip in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service crash...

CVE-2007-2297

The SIP channel driver chansip in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service crash...

CVE-2007-2297

The SIP channel driver chansip in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service crash...

Linksys SPA941 - Remote Reboot (Denial of Service)

!/usr/bin/perl use IO::Socket; die "Usage $0 " unless $ARGV2; die "Usage $0 " unless $ARGV0; my $sock = new IO::Socket::INET LocalHost = $ARGV2, LocalPort = $ARGV3, Proto = 'udp'; $socket=new IO::Socket::INET-newPeerAddr=$ARGV1, PeerPort= '5060', Proto='udp', LocalAddr=$ARGV2, LocalPort='5061';...

Linksys SPA941 - Remote Reboot (Denial of Service)

Linksys SPA941 - Remote Reboot Denial of Service !/usr/bin/perl use IO::Socket; die "Usage $0 " unless $ARGV2; die "Usage $0 " unless $ARGV0; my $sock = new IO::Socket::INET LocalHost = $ARGV2, LocalPort = $ARGV3, Proto = 'udp'; $socket=new IO::Socket::INET-newPeerAddr=$ARGV1, PeerPort= '5060',...

Linksys SPA941 - '\377' Character Remote Denial of Service

!/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\377\r Via: SIP/2.0/UDP 192.168.1.2;rport;branch=00\377\r Max-Forwards: 70\377\r To: lynksys \377\r From:...

Linksys SPA941 - \377 Character Remote Denial of Service

Linksys SPA941 - \377 Character Remote Denial of Service !/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\377\r Via: SIP/2.0/UDP...

LANDesk Management Suite Alert Service (aolnsrvr.exe) Remote Overflow

LANDesk Management Suite, used to automate system and security management tasks, is installed on the remote host. The version of LANDesk Management Suite includes an instance of Intel Pro Alerting Proxy, which contains a stack-based buffer overflow vulnerability. An attacker may be able to levera...

CVE-2007-1674

Stack-based buffer overflow in the Alert Service aolnsrvr.exe in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 65535/UDP...

CVE-2007-1674

Stack-based buffer overflow in the Alert Service aolnsrvr.exe in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 65535/UDP...

DNS birthday attacks

DNS uses 2-bytes message identificator to prevent spoofing attack. The problem is if few same requests came in same time they are forwarded with different IDs from same UDP port. It increases chances to spoof reply so called birthdey effect: probability that among 60 randomely choosen persons the...

TSRT-07-04: LANDesk Management Suite Alert Service Stack Overflow Vulnerability

TSRT-07-04: LANDesk Management Suite Alert Service Stack Overflow Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-07-04.html April 13, 2007 -- CVE ID: CVE-2007-1674 -- Affected Vendor: LANDesk -- Affected Products: Management Suite 8.7 -- TippingPointTM IPS Customer Protection:...

HP-UX pfs_mountd.rpc PFS file system daemon buffer overflow

Buffer overflow on UDP datagrams parsing...

CVE-2003-1325

The SVCheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service infinite loop and daemon hang via a certain connection string to UDP port 27015 that represents "absence of player...

Microsoft Windows Universal PnP memory corruption

Memory corruption during TCP/2869 and UDP/1900 request processing...

Stack overflow

Stack-based buffer overflow in the dnsdecodereversename function in dnsdecode.c in dproxy-nexgen allows remote attackers to execute arbitrary code by sending a crafted packet to port 53/udp, a different issue than CVE-2007-1465...

CVE-2007-1866

Stack-based buffer overflow in the dnsdecodereversename function in dnsdecode.c in dproxy-nexgen allows remote attackers to execute arbitrary code by sending a crafted packet to port 53/udp, a different issue than CVE-2007-1465...

CVE-2007-1866

CVE-2007-1866 involves a stack-based buffer overflow in the dns_decode_reverse_name function of the dproxy-nexgen project (dns_decode.c). The vulnerability allows remote attackers to gain arbitrary code execution by sending a crafted UDP DNS packet to port 53. This is a remote-exploit scenario wi...