CVE-2006-5785

Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service enserver.exe crash via a 0x72F2 sequence on UDP port 64999...

CVE-2006-5785

SAP Web Application Server is affected by CVE-2006-5785. The issue allows remote denial of service (enserver.exe crash) on UDP port 64999 via a 0x72F2 sequence for SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66. The vulnerability is confirmed in the NVD entry for CVE-20...

VBS+MSWinsock build smart UDP Backdoor-vulnerability warning-the black bar safety net

About a year ago, the VBS script virus also lifted a burst of craze, a large group of VBS virus on the Internet prevalent. Then the VBS virus almost all with FSO, MAPI as a virus engine, so I would think that VBS could access the network? If it can be port of connection, that magical. Since then,...

iodine client 0.3.2 buffer overflow

hi, iodine client 0.3.2, available at http://code.kryo.se/iodine/ , suffers from a stack-based buffer overflow vulnerability which could result in the execution of arbitrary code. A specially crafted dns response sent through an UDP packet can be used to exploit this issue. cheers -p...

Microsoft Windows NAT帮助程序远程拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows NAT帮助程序模块在处理畸形DNS报文时存在漏洞，远程攻击者可能利用此漏洞执行拒绝服务攻击。 如果Windows XP用户启用了Internet连接共享的话，则远程攻击者可以通过发送Additional RRs（也被称为Additional Information）部分包含有两个空字节的DNS报文导致服务和主机进程（svchost.exe）崩溃。由于ICS服务关系到防火墙服务，因此ICS崩溃就会导致防火墙服务失效。 Microsoft Windows XP SP2 Microsoft...

SIP Invite Spoof

This module will create a fake SIP invite request making the targeted device ring and display fake caller id information. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Invite Spoof',...

Microsoft Windows SMB重命名远程拒绝服务漏洞（MS06-063）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的Server服务处理内存重新分配请求的方式存在漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令或导致拒绝服务。 已认证的攻击者可以向运行Server服务的计算机发送特制网络消息来利用该漏洞。尽管成功利用这个漏洞的攻击者可能完全控制受影响的系统，但攻击最可能导致的是拒绝服务的情况。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 200...

The use of LINUX systems with DDOS attacks for WINDOWS servers-vulnerability warning-the black bar safety net

Use the moment the most famous of the REDHAT LINUX test,the present attack test I'm using FEDORA CORE3 ,software is the most famousDDOSattack tool TFN2K LINUX version,is to attack the WINDOWS Server system is using Windows 2000 Server service open APACHE2 FTP VNC little relationship,mainly to...

Kerio Personal Firewall 2.1.4 Remote Code Execution Exploit

No description provided by source. / Kerio Personal Firewall v2.1.4 remote code execution exploit Tested on Windows XP with SP1 In order to exploit, for ease of mind, set the firewall to permit all traffic, or allow a connection to port 44334 from your testing unix shell ip. It is also possible t...

BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (2)

No description provided by source. / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Slackware 4.0/RedHat 6.2 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the "infoleak" bug through UDP to obtain t...

CVE-2006-5391

Xfire 1.64 and earlier allows remote attackers to cause a denial of service client application crash via a long string to UDP port 25777...

CVE-2006-5391

Xfire 1.64 and earlier is affected by CVE-2006-5391. An attacker can remotely cause a denial of service by sending a long string to UDP port 25777, triggering a client application crash. The available documents state the vulnerability and impact but do not provide details on root cause beyond the...

CVE-2006-5391

Xfire 1.64 and earlier allows remote attackers to cause a denial of service client application crash via a long string to UDP port 25777...

Syslog PRIORITY Field Enforcement

Syslog is a standard for transporting event notification messages over IP networks to event message collectors, or Syslog servers. Syslog is often used for system management and security auditing. Syslog servers, by default, listen on UDP port 514.Also, it is possible to have event message relays...

Xfire 1.6.4 - Remote Denial of Service

!/usr/bin/perl Moderator of http://igniteds.net X fire version:new Release 1.64 Vendors web site http://www.xfire.com/ remote exploit coded by: n00b.. Credit's to n00b for finding this bug.. Xfire client has a dos exploit closing the client upon success full exploitation xfire will fail..Ive...

CA BrightStor ARCserve Discovery Service Remote Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup, Enterprise Backup, Server Protection Suite and Business Protection Suite. Authentication is not required to exploit this vulnerability and both clien...

[Full-disclosure] (0-Day) GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS

Title: GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS Version: 1.1.0.5 Issues: 1.The phone has multiple undocumented open UDP ports, including 5062, 5064, 5066, 9876, 26789 2.Sending large amount of ascii data via NetCat to any open UDP port, including UDP/5060,...

Multiple VoIP phones vulnerabilities

Buffer overflows in integrated HTTP server. Buffer overflow on large UDP datagrams...

CVE-2006-4781

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...

SIPfoundry sipXezPhone 0.35a CSeq Field Overflow

This module exploits a buffer overflow in SIPfoundry's sipXezPhone version 0.35a. By sending an long CSeq header, a remote attacker could overflow a buffer and execute arbitrary code on the system with the privileges of the affected application. This module requires Metasploit:...