CVE-2013-4688

CVE-2013-4688 affects Juniper Junos SRX devices running 10.4 prior to 10.4R11, where the MSRPC Application Layer Gateway (ALG) is enabled. A remote, unauthenticated attacker can crash the process by sending crafted MSRPC requests, causing a denial of service (daemon crash). The issue is rooted in...

PT-2013-5138

Name of the Vulnerable Software and Affected Versions Junos version 10.4 before 10.4R11 on SRX devices Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via crafted MSRPC requests when the MSRPC Application Layer Gateway ALG is enabled...

CVE-2013-3672

The mmdecodeinter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted American Laser...

CVE-2013-3672

CVE-2013-3672 concerns FFmpeg’s libavcodec/mmvideo.c:mm_decode_inter, where the code fails to validate the relationship between a horizontal coordinate and a width, enabling a remote attacker to trigger an out-of-bounds access and cause a crash (Denial of Service). It affects FFmpeg/libavcodec pr...

CVE-2013-3672

The mmdecodeinter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted American Laser...

CVE-2013-3672

The mmdecodeinter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted American Laser...

PT-2013-4560

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.2.1 Description The issue is related to the mm decode inter function in mmvideo.c in libavcodec, which does not validate the relationship between a horizontal coordinate and a width value. This allows remote attacker...

CVE-2013-3672: Improper Input Validation

The mmdecodeinter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted American Laser...

CVE-2013-1166

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

Code injection

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

CVE-2013-1166

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

CVE-2013-1166

CVE-2013-1166 affects Cisco IOS XE on 1000 Series ASR routers (versions 3.2–3.4 up to 3.4.5S and 3.5–3.7 up to 3.7.1S). When VRF-aware NAT and SIP ALG are enabled, remote attackers can trigger a denial of service via a flood of SIP packets, potentially causing a reload of the ESP/RP cards and ser...

PT-2013-2934

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.2 through 3.4 before 3.4.5S Cisco IOS XE versions 3.5 through 3.7 before 3.7.1S Description The issue allows remote attackers to cause a denial of service card reload by sending many SIP packets when VRF-aware NAT and S...

CVE-2013-1166: Improper Input Validation

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

PsychoStats 3.2.2b Blind SQL Injection

Exploit Title : PsychoStats awards.php blind SQL Injection ============== Date: 27/03/2013 00:50 ===== Author: Mohamed from ALG ====== Vendor or Software Link:http://psychostats.us/ ======================= Version: 3.2.2b ======== Category: webapps ========= Google Keywords: "Powered by PsychoSta...

CVE-2012-4618: Undefined Security Weakness

The SIP ALG feature in the NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service device reload via transit IP packets, aka Bug ID CSCtn76183...

Cisco IOS NAT功能拒绝服务漏洞(CVE-2012-4618)

BUGTRAQ ID: 55693 CVE ID: CVE-2012-4618 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。NAT SIP ALG功能可通过IP报文的SIP负载内嵌入的IP地址转换，根据SIP部署VoIP解决方案之间的Cisco IOS NAT， Cisco IOS在启用了NAT SIP ALG功能处理SIP报文时存在安全漏洞，NAT SIP ALG是默认启用的并执行了IP报文的SIP负载转换。默认是对UDP端口5060报文转换NAT SIP。该端口使用全局配置命令"ip nat service sip udp port"配置。...

CVE-2012-4618

The CVE-2012-4618 issue affects Cisco IOS Software Network Address Translation NAT with the SIP ALG feature. The vulnerability arises when SIP payloads are translated for in-transit packets, causing a denial of service that can trigger a device reload. Affected IOS versions noted in the sources i...

CVE-2012-4618

The SIP ALG feature in the NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service device reload via transit IP packets, aka Bug ID CSCtn76183...

PT-2012-5522

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 12.4, 15.0 through 15.2 Description The issue allows remote attackers to cause a denial of service via transit IP packets. This is related to the SIP ALG feature in the NAT implementation and the translation of IP...