8916 matches found
D-Link Routers - UPNP Buffer Overflow
D-Link Routers - UPNP Buffer Overflow source: https://www.securityfocus.com/bid/19006/info D-Link wired and wireless routers are prone to a buffer-overflow vulnerability because these devices fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...
D-Link Routers - UPNP Buffer Overflow
source: https://www.securityfocus.com/bid/19006/info D-Link wired and wireless routers are prone to a buffer-overflow vulnerability because these devices fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successful exploits can allow...
CVE-2006-3551
NCP Secure Enterprise Client aka VPN/PKI client 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and...
CVE-2006-3551
NCP Secure Enterprise Client aka VPN/PKI client 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and...
CVE-2006-3551
CVE-2006-3551 affects NCP Secure Enterprise Client (VPN/PKI client) 8.30 Build 59 and possibly earlier. When both the Link Firewall and Personal Firewall are configured to block all inbound and outbound traffic, the client could be leveraged to send inbound UDP traffic from source port 67 to dest...
CVE-2006-3551: Undefined Security Weakness
NCP Secure Enterprise Client aka VPN/PKI client 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and...
TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability
TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-02.html July 11, 2006 -- CVE ID: CVE-2006-1314 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 Windows XP SP1 Windows XP SP2 Windows 2003 Windows...
Microsoft Server Service Mailslot vulnerable to heap overflow
Overview A buffer overflow vulnerability in the Microsoft mailslot server service may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Mailslot A mailslot is a temporary mechanism that can facilitate data transfer between hosts. Mailslots messages are limited ...
[Full-disclosure] ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton)
ERNW Security Advisory 02-2006 Buffer Overflow in SIP Foundry's SipXtapi Author: Michael Thumann mthumannaternw.de Homepage: www.ernw.de 1. Summary: The sipXtapi library from sip foundry contains a buffer overflow when parsing the CSeq field. This flaw can be used by an attacker to gain control...
SIPfoundry sipXezPhone 0.35a CSeq Field Overflow
This module exploits a buffer overflow in SIPfoundry's sipXezPhone version 0.35a. By sending an long CSeq header, a remote attacker could overflow a buffer and execute arbitrary code on the system with the privileges of the affected application. Module Options msf use...
SIPfoundry sipXtapi - 'CSeq' Remote Buffer Overflow (PoC)
!/usr/bin/perl PoC Exploit By [email protected] Remote Buffer Overflow in sipXtapi use IO::Socket; use strict; print "sipXtapi Exploit by Michael Thumann \n\n"; if not $ARGV0 print "Usage: sipx.pl \n"; exit; $target=$ARGV0; my $source ="127.0.0.1"; my $targetport = 5060; my $user ="bad"; my...
CVE-2006-3393
Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service CPU consumption by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket...
CVE-2006-3393
Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service CPU consumption by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket...
CVE-2006-3393
CVE-2006-3393 affects Papyrus NASCAR Racing versions up to 4.1.3.1.6 (and specific earlier season releases). The flaw allows remote attackers to cause a denial of service by sending an empty UDP datagram, which is not properly discarded due to the use of the FIONREAD asynchronous socket, leading ...
CVE-2006-3393: Undefined Security Weakness
Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service CPU consumption by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket...
F-Secure Product Detection (UDP)
Binary data 3676.prm...
Port·Trojan·security·scanning applications knowledge-vulnerability warning-the black bar safety net
See this topic you maybe a little strange, how can put this a few words put together, actually talking about ports and Trojans are commonplace, but even that is often talked about there are a lot of people a computer is a“shock wave”rushing through after the turn is“shock wave”severely earthquake...
CVE-2006-2971
Integer overflow in the recvpacket function in 0verkill 0.16 allows remote attackers to cause a denial of service daemon crash via a UDP packet with fewer than 12 bytes, which results in a long length value to the crc32 function...
Integer overflow
Integer overflow in the recvpacket function in 0verkill 0.16 allows remote attackers to cause a denial of service daemon crash via a UDP packet with fewer than 12 bytes, which results in a long length value to the crc32 function...
CVE-2006-2971
Integer overflow in the recvpacket function in 0verkill 0.16 allows remote attackers to cause a denial of service daemon crash via a UDP packet with fewer than 12 bytes, which results in a long length value to the crc32 function...