Privilege escalation

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability."...

kernel: sctp dos

A certain Red Hat patch to the sctpsockmigrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux RHEL 5, allows remote attackers to cause a denial of service NULL pointer dereference and OOPS via a crafted SCTP packet...

Wireshark IKE Packet Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodwiresharkikepacketdosvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Wireshark IKE Packet Denial of Service Vulnerability Windows Authors: Madhuri D Copyright: Copyright c...

CVE-2011-3188

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

Mandriva Update for dhcp MDVSA-2011:128 (dhcp)

Check for the Version of dhcp OpenVAS Vulnerability Test Mandriva Update for dhcp MDVSA-2011:128 dhcp Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2011-1968

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service reboot by sending crafted RDP packets triggering access to an object that 1 was no...

Novell File Reporter Engine 'RECORD' Processing Buffer Overflow Vulnerability

This host is installed with Novell File Reporter engine and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterenginebofvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Novell File Reporter Engine 'RECORD' Processing Buffer Overflow Vulnerability Authors...

Code injection

Cisco IOS 12.4MDA before 12.424MDA5 on the Cisco Content Services Gateway - Second Generation CSG2 allows remote attackers to cause a denial of service device reload via crafted ICMP packets, aka Bug ID CSCtl79577...

[USN-1163-1] Bind vulnerability

========================================================================== Ubuntu Security Notice USN-1163-1 July 05, 2011 bind9 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

USN-1163-1: Bind vulnerability

It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to stop responding, resulting in a denial of service...

DATAC RealWin SCADA Server On_FC_CONNECT_FCS_a_FILE Buffer Overflow Vulnerability

DATAC RealWin SCADA Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

sssd: DoS in sssd PAM responder can prevent logins

The pamparseindatav2 function in src/responder/pam/pamsrvcmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service infinite loop, crash, and login prevention via a crafted packet...

MS11-035: Vulnerability in WINS Could Allow Remote Code Execution (2524426) (uncredentialed check)

The version of WINS Windows Internet Name Service installed on the remote Windows host is affected by a memory corruption vulnerability due to a logic error when handling a socket send exception. By sending specially crafted packets to the affected WINS system, a remote attacker can potentially...

CVE-2011-1248

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted packets, related to unintended stack-frame values...

Stack overflow

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted packets, related to unintended stack-frame values...

CVE-2011-1248

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted packets, related to unintended stack-frame values...

kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set

net/sctp/smmakechunk.c in the Linux kernel before 2.6.34, when addipenable and authenable are used, does not consider the amount of zero padding during calculation of chunk lengths for 1 INIT and 2 INIT ACK chunks, which allows remote attackers to cause a denial of service OOPS via crafted packet...

MS11-035: Vulnerability in WINS Could Allow Remote Code Execution (2524426)

The version of WINS Windows Internet Name Service installed on the remote Windows host is affected by a memory corruption vulnerability due to a logic error when handling a socket send exception. By sending specially crafted packets to the affected WINS system, a remote attacker can potentially...

Immunity Canvas: CVE_2011_0997

Name| CVE20110997 ---|--- CVE| CVE-2011-0997 Exploit Pack| CANVAS Description| CVE20110997 DHClient Exploit Notes| CVE Name: CVE-2011-0997 NOTES: -This exploit answers dhcp requests with crafted packets to get commands executed by scripts using the hostname. For this exploit to work, the target...

CVE-2011-1563

Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via 1 a long username in an OnFCCONNECTFCSLOGIN packet, and crafted 2 OnFCCTAGLISTFCSCADDTAG, 3 OnFCCTAGLISTFCSCDELTAG, 4...