Debian DSA-751-1 : squid - IP spoofing

The upstream developers have discovered a bug in the DNS lookup code of Squid, the popular WWW proxy cache. When the DNS client UDP port assigned by the operating system at startup is unfiltered and the network is not protected from IP spoofing, malicious users can spoof DNS lookups which could...

Solaris Socket Hijack

/ $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...

CVE-2002-1768

Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service CPU consumption via randomly sized UDP packets to the Hot Standby Routing Protocol HSRP port 1985...

TFTPD small overflow

It is possible to crash the remote TFTP server by sending a small UDP packet. A remote attacker could exploit this to crash the service. This script was written by Josh Zlatin-Amishav GNU Public Licence GPLv2 This plugin is just a very slightly modified version of tftpdoverflow.nasl...

Microsoft Incoming SMB Packet Validation Remote Buffer Overflow Vulnerability

Description Microsoft SMB is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. Remote attackers may exploit this vulnerability to execut...

Microsoft Outlook Express vulnerable to remote code execution

Overview A vulnerability in Microsoft Outlook Express's NNTP response parsing may allow an attacker to execute arbitrary code. Description Microsoft Outlook Express contains support for Network News Transfer Protocol NNTP data, which is defined in RFC 977 and RFC 2980. A flaw in Outlook Express'...

Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability

Description Microsoft Outlook Express is prone to a buffer overflow when parsing NNTP responses. Successful exploits could allow arbitrary code to run in the context of the user running the application. Technologies Affected Microsoft Outlook Express 5.0 Microsoft Outlook Express 5.5 Microsoft...

CVE-2005-1899

Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a denial of service infinite loop via a zero-byte UDP packet...

CVE-2005-1899

Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a denial of service infinite loop via a zero-byte UDP packet...

CVE-2005-1899

Affected software: Rakkarsoft RakNet network library 2.33 and earlier. Vulnerability: remote denial of service via a zero-byte UDP packet, causing an infinite loop. Impact scope: used in multiple products (e.g., nFusion Elite Warriors: Vietnam) as of the cited CVE. Root cause/notes: the descripti...

Raknet network library DoS

Endless loop with 100 CPU usage on empty UDP packet...

Rakkarsoft RakNet 2.33 - Remote Denial of Service

Rakkarsoft RakNet 2.33 - Remote Denial of Service source: https://www.securityfocus.com/bid/13862/info Rakkarsoft RakNet is affected by a remote denial of service vulnerability. Reportedly, the vulnerability presents itself when the library handles an empty UDP packet. RakNet 2.33 and prior...

Rakkarsoft RakNet 2.33 - Remote Denial of Service

source: https://www.securityfocus.com/bid/13862/info Rakkarsoft RakNet is affected by a remote denial of service vulnerability. Reportedly, the vulnerability presents itself when the library handles an empty UDP packet. RakNet 2.33 and prior versions released before May 30, 2005 are affected by...

DNS Server UDP Query Limitation

A DNS server is running on this port but it only answers to UDP requests. This means that TCP requests are blocked by a firewall. This configuration is not RFC-compliant. Contrary to common belief, TCP transport is not restricted to zone transfers AXFR : - answers bigger than 512 bytes are always...

CVE-2005-1643

The ZComBitStream::Deserialize function in Zoidcom 1.0 beta 4 and earlier allows remote attackers to cause a denial of service via a crafted UDP packet with a large size value, which causes a memory allocation error or an out-of-bounds read...

CVE-2005-1643

The CVE-2005-1643 entry affects Zoidcom 1.0 beta 4 and earlier . The vulnerability lies in the ZCom_BitStream::Deserialize function, where processing a crafted UDP packet with a large size value can trigger a memory allocation error or an out-of-bounds read, enabling a remote attacker to cause a ...

CVE-2005-1643

The ZComBitStream::Deserialize function in Zoidcom 1.0 beta 4 and earlier allows remote attackers to cause a denial of service via a crafted UDP packet with a large size value, which causes a memory allocation error or an out-of-bounds read...

TFTPD Server Filename Handling Remote Overflow

The remote TFTP server dies when it receives a too big UDP datagram. An attacker may use this flaw to disable the server, or even execute arbitrary code on the system. C Tenable Network Security, Inc. Not tested against a vulnerable server! include"compat.inc"; if description scriptid18264;...

CVE-2004-2002

Technical details for CVE-2004-2002 are not publicly available in the provided documents; no information on affected products, versions, root cause, or fix is present. Monitor for updates.

CVE-2003-1163

CVE-2003-1163 affects Ganglia gmond 2.5.3. The vulnerability arises in hash.c where a UDP packet containing a single-byte name string is used as an out-of-bounds array index, causing a remote denial of service (segmentation fault). Exploitation details are not provided beyond the description, and...