CVE-2006-4781

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...

CVE-2006-4781: Undefined Security Weakness

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...

GLSA-200608-23 : Heartbeat: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200608-23 Heartbeat: Denial of Service Yan Rong Ge discovered that the peelnetstring function in clnetstring.c does not validate the 'length' parameter of user input, which can lead to an out-of-bounds memory access when processin...

CVE-2006-4194

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

CVE-2006-4194

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

CVE-2006-4194

CVE-2006-4032 (Cisco IOS CME) and CVE-2006-4194 involve an unspecified vulnerability in Cisco products (CME and PIX 500) where remote attackers can access sensitive information (e.g., SIP user directory usernames) through SIP-related messages or fixups. The description notes the vendor could not ...

CVE-2006-4194: Undefined Security Weakness

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

UDP the Trojan trek-vulnerability warning-the black bar safety net

| Current in the network upstream of the blow-by modus the Trojans are usually use the TCP port for remote control, but this Trojan for a bit of network security awareness of friends is very easy to be found. Cunning intruders in the face of this situation, developed using UDP port of the Trojan,...

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4132: Undefined Security Weakness

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

[Full-disclosure] PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service

Vulnerability Report ----------------------------- Vendor: Microsoft and ArcSoft Product: PocketPC OS and MMS Composer Versions: MMS Composer: 1.5.5.6, 2.0.0.13 possible others Platform: PocketPC tested on: WinCE 4.2 and WinCE 4.21, possible others Architecture: ARM Devices: HP iPAQ h6315, i-mate...

CVE-2006-4029

Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...

CVE-2006-4029

Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...

CVE-2006-4029

AGEphone 1.24 and 1.38.1 are affected by a stack-based buffer overflow in sipd.dll that can be triggered by a crafted UDP SIP packet. This vulnerability allows remote attackers to execute arbitrary code. Affected component: sipd.dll within AGEphone. Root cause: stack-based overflow in the SIP pac...

PocketPC Mms Composer - WAPPush Denial of Service

PocketPC Mms Composer - WAPPush Denial of Service / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org...

Linux Ext3 file system NFS DoS

On malformed UDP packet filesystem is marked as corrupted and is switched to read-only mode...

Bad ext3/nfs DoS bug

I've tried contacting the relevant maintainers directly, and it's even in the kernel bugzilla, but nothing's happened and it's been over a month now. No-one seems to be doing anyting about this. Is one meant to post this to bugtraq or what? Here's the bug:...

CVE-2006-4029: Undefined Security Weakness

Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

No description provided by source. / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner [email protected] http://www.trifinite.org...