Stack overflow

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted packets, related to unintended stack-frame values...

CVE-2011-1248

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted packets, related to unintended stack-frame values...

kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set

net/sctp/smmakechunk.c in the Linux kernel before 2.6.34, when addipenable and authenable are used, does not consider the amount of zero padding during calculation of chunk lengths for 1 INIT and 2 INIT ACK chunks, which allows remote attackers to cause a denial of service OOPS via crafted packet...

MS11-035: Vulnerability in WINS Could Allow Remote Code Execution (2524426)

The version of WINS Windows Internet Name Service installed on the remote Windows host is affected by a memory corruption vulnerability due to a logic error when handling a socket send exception. By sending specially crafted packets to the affected WINS system, a remote attacker can potentially...

Immunity Canvas: CVE_2011_0997

Name| CVE20110997 ---|--- CVE| CVE-2011-0997 Exploit Pack| CANVAS Description| CVE20110997 DHClient Exploit Notes| CVE Name: CVE-2011-0997 NOTES: -This exploit answers dhcp requests with crafted packets to get commands executed by scripts using the hostname. For this exploit to work, the target...

CVE-2011-1564

Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via crafted 1 OnFCMISCFCSMSGBROADCAST and 2 OnFCMISCFCSMSGSEND packets, which trigger a heap-based buffer overflow...

CVE-2011-1563

Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via 1 a long username in an OnFCCONNECTFCSLOGIN packet, and crafted 2 OnFCCTAGLISTFCSCADDTAG, 3 OnFCCTAGLISTFCSCDELTAG, 4...

Stack overflow

Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via 1 a long username in an OnFCCONNECTFCSLOGIN packet, and crafted 2 OnFCCTAGLISTFCSCADDTAG, 3 OnFCCTAGLISTFCSCDELTAG, 4...

CVE-2011-1564

Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via crafted 1 OnFCMISCFCSMSGBROADCAST and 2 OnFCMISCFCSMSGSEND packets, which trigger a heap-based buffer overflow...

Code injection

The ASN.1 BER dissector in Wireshark 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service assertion failure via crafted packets, as demonstrated by fuzz-2010-12-30-28473.pcap...

CVE-2011-0445

The ASN.1 BER dissector in Wireshark 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service assertion failure via crafted packets, as demonstrated by fuzz-2010-12-30-28473.pcap...

CVE-2010-1828

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon restart via crafted reconnect authentication packets...

CVE-2010-1828

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon restart via crafted reconnect authentication packets...

CVE-2010-1828

The CVE-2010-1828 entry affects AFP Server in Mac OS X 10.5.8 and 10.6.x prior to 10.6.5. Root cause: a NULL pointer dereference in AFP Server’s handling of reconnect authentication packets, leading to remote denial of service and daemon restart. Public detail confirms the impact as a crash/resta...

HP Data Protector Media Operations - Null Pointer Dereference Remote Denial of Service

HP Data Protector Media Operations - Null Pointer Dereference Remote Denial of Service !/usr/bin/python import socket,struct,sys,os SIGN=0x04030201 cmd=0x01000000 def main: if lensys.argv!=2: print"\nx Usage: python "+sys.argv0+" \n" sys.exit0 else: host=sys.argv1,19813 default port TCP/19813 if...

HP Data Protector Media Operations - Null Pointer Dereference Remote Denial of Service

!/usr/bin/python import socket,struct,sys,os SIGN=0x04030201 cmd=0x01000000 def main: if lensys.argv!=2: print"\nx Usage: python "+sys.argv0+" \n" sys.exit0 else: host=sys.argv1,19813 default port TCP/19813 if sys.platform=="win32": os.system"cls" else: os.system"clear" s=socket.socket try:...

Code injection

Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 2.5.x before 2.5.2 and 2.6.x before 2.6.1, allows remote attackers to cause a denial of service traceback and device reload via crafted H.323 packets, aka Bug ID CSCtd33567...

Cisco IOS Software Vulnerability

Cisco has released a security advisory to address a vulnerability affecting IOS Software Release 15.12T. This vulnerability may allow an attacker to cause a denial-of-service condition by sending a specially crafted packet through normal network traffic. US-CERT encourages users and administrator...

PT-2010-4099 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 Microsoft Windows 7 Description: A denial of service issue exists due to improper validation of an internal variable in SMB packets. This...

PT-2010-4098 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, and R2 Microsoft Windows 7 affected versions not specified...