Cisco - Cisco Global er Tool

!/usr/bin/perl Cisco Global Exploiter Legal notes : The BlackAngels staff refuse all responsabilities for an incorrect or illegal use of this software or for eventual damages to others systems. www blackangels it Modules use Socket; use IO::Socket; Main $host = ""; $expvuln = ""; $host = @ARGV 1 ...

Immunity Advisory: dtlogin remote root

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Summary: A double-free weakness in the XDMCP parser of dtlogin CDE results in remote code execution against popular server operating systems, such as Solaris. Linux is not vulnerable, to Immunity's knowledge. This attack is performed over UD...

CVE-2004-0247

CVE-2004-0247 affects Chaser 1.50 and earlier. A remote attacker can cause a denial of service by sending a UDP packet whose length field exceeds actual data, causing the client/server to read past memory. The provided documents describe the vulnerability and impact but do not specify a remediati...

CVE-2004-0352

The vulnerability CVE-2004-0352 affects Cisco 11000 Series Content Services Switches running WebNS. Specifically, WebNS 5.0(x) before 05.0(04.07)S and 6.10(x) before 06.10(02.05)S are susceptible. A remote attacker can trigger a denial of service (device reset) by sending a malformed UDP packet t...

CVE-2004-0247

The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service crash via exception via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory...

CVE-2004-0352

Cisco 11000 Series Content Services Switches CSS running WebNS 5.0x before 05.004.07S, and 6.10x before 06.1002.05S allow remote attackers to cause a denial of service device reset via a malformed packet to UDP port 5002...

CVE-2004-0247: Undefined Security Weakness

The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service crash via exception via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory...

CVE-2004-0352: Undefined Security Weakness

Cisco 11000 Series Content Services Switches CSS running WebNS 5.0x before 05.004.07S, and 6.10x before 06.1002.05S allow remote attackers to cause a denial of service device reset via a malformed packet to UDP port 5002...

ISS PAM.dll ICQ Parser Buffer Overflow

This module exploits a stack buffer overflow in the ISS products that use the iss-pam1.dll ICQ parser Blackice/RealSecure. Successful exploitation will result in arbitrary code execution as LocalSystem. This exploit only requires 1 UDP packet, which can be both spoofed and sent to a broadcast...

Cisco CSS UDP DoS

DoS on malformed packets to UDP/5002...

Cisco Security Advisory: Cisco CSS 11000 Series Content Services Switches Malformed UDP Packet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco CSS 11000 Series Content Services Switches Malformed UDP Packet Vulnerability Revision 1 For Public Release 2004 March 4 at 1700 UTC GMT ---------------------------------------------------------------------- Contents...

Cisco CSS 11000 Series Content Services Switch vulnerable to DoS via malformed UDP packets

Overview Several models of the Cisco Content Services Switch contain a vulnerability in their management interface that allows an attacker to restart the switch, resulting in a denial of service attack. Description The Cisco CSS 11000 Series Content Services Switches contain a vulnerability in...

Cisco CSS 11000 Series Content Services Switches Malformed UDP Packet Vulnerability

...

Red Faction 1.20 - Server Reply Remote Buffer Overflow (PoC)

/ by Luigi Auriemma UNIX & WIN VERSION / include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include endif define VER "0.1" define BUFFSZ 2048 define PORT 7755 define RETADDR "\xde\xc0\xad\xde" // 0xdeadc0de void stderrvoid;...

Red Faction 1.20 - Server Reply Remote Buffer Overflow (PoC)

Red Faction 1.20 - Server Reply Remote Buffer Overflow PoC / by Luigi Auriemma UNIX & WIN VERSION / include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include endif define VER "0.1" define BUFFSZ 2048 define PORT 7755 defin...

CVE-2004-0131

The radprintrequest function in logger.c for GNU Radius daemon radiusd before 1.2 allows remote attackers to cause a denial of service crash via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference...

CVE-2003-1029

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...

CVE-2003-0903

Buffer overflow in a component of Microsoft Data Access Components MDAC 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request...

iDEFENSE Security Advisory 02.04.04: GNU Radius Remote Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 02.04.04 GNU Radius Remote Denial of Service Vulnerability http://www.idefense.com/application/poi/display?id=71 February 4, 2004 I. BACKGROUND Radius is a server for remote user authentication and accounting. More informati...

GNU Radius accounting service fails to properly handle exceptional Acct-Status-Type and Acct-Session-Id attributes

Overview The GNU Radius accounting service fails to properly handle packets with exceptional Acct-Status-Type and Acct-Session-Id attributes. Description GNU Radius is a software package used for remote user authentication and accounting. There is a vulnerability in the way the radprintrequest...