Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...

Stack overflow

Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53...

CVE-2007-1465

Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53...

CVE-2007-1465

Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53...

CVE-2007-1465

CVE-2007-1465 describes a stack-based buffer overflow in dproxy.c for dproxy 0.1–0.5 triggered by a long DNS query packet to UDP port 53, enabling remote execution of code. The core issue is a overflow in handling DNS queries, leading to arbitrary code execution. The connected records also refere...

Buffer overflow

Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812...

dproxy.pm.txt

MetaSploit exploit for remote buffer overflow issue in dproxy Written in 2007 by Alexander Klink c 2007 Cynops GmbH released under the same license as MSF Artistic, GPL dual-licensed $Revision: 1.1 $ package Msf::Exploit::dproxy; use strict; use base 'Msf::Exploit'; use Msf::Socket::Udp; use...

CVE-2007-1645

Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812...

CVE-2007-1645

Technical details about CVE-2007-1645 are not publicly available in the provided connected documents. Monitor for updates from Red Hat/NVD references to confirm affected versions, impact, and mitigations.

Linksys WAG200G - Information disclosure

Hi there, About 2 months ago I bought a wireless ADSL modem/router, the Linksys WAG200G. Just did some basic security checks and to my utter surprise the device responded with about all sensitive information it knows: Product model Password webinterface Username PPPoA Password PPPoA SSID WPA...

Linksys wireless routers information leak

Configuration information, including whole set of password is returned by request to UDP/916 port...

CVE-2007-1585

The Linksys WAG200G with firmware 1.01.01, WRT54GC 2 with firmware 1.00.7, and WRT54GC 1 with firmware 1.03.0 and earlier allow remote attackers to obtain sensitive information passwords and configuration data via a packet to UDP port 916. NOTE: some of these details are obtained from third party...

CVE-2007-1585

The Linksys WAG200G with firmware 1.01.01, WRT54GC 2 with firmware 1.00.7, and WRT54GC 1 with firmware 1.03.0 and earlier allow remote attackers to obtain sensitive information passwords and configuration data via a packet to UDP port 916. NOTE: some of these details are obtained from third party...

CVE-2007-1585

The CVE-2007-1585 entry concerns Linksys devices (WAG200G; WRT54GC v1/v2) with specific firmware versions (WAG200G 1.01.01, WRT54GC 1.x/2 with 1.03.0 or earlier) that allow remote attackers to obtain sensitive information (passwords and configuration data). The underlying issue enables data discl...

CVE-2007-1533

CVE-2007-1533 affects the Teredo implementation in Microsoft Windows Vista. The issue: the Teredo nonce is reused across different UDP ports within a solicitation session, enabling remote attackers to brute-force and spoof the nonce. Documents describe a network-exposed impact (remote spoofing po...

CVE-2007-1533

The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation session, which makes it easier for remote attackers to spoof the nonce through brute force attacks...

D-Link TFTP 1.0 - Transporting Mode Remote Buffer Overflow

D-Link TFTP 1.0 - Transporting Mode Remote Buffer Overflow source: https://www.securityfocus.com/bid/22923/info D-Link TFTP is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before storing it in a finite-sized buffer. A remote...

CVE-2007-1398

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ipconntrack module loaded, allows remote attackers to cause a denial of service segmentation fault and application crash via certain UDP packets produced by sendmorefragpacket and...

Code injection

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ipconntrack module loaded, allows remote attackers to cause a denial of service segmentation fault and application crash via certain UDP packets produced by sendmorefragpacket and...

CVE-2007-1404

tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recvfrom call. NOTE: this issue might be related to CVE-2006-4948...