Wireshark 'DCERPC/NT' Dissector DOS Vulnerability (Nov 2009) - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

CVE-2009-3550

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party...

Null pointer dereference

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party...

DEBIAN-CVE-2009-3550

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party...

CVE-2009-3550

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party...

CVE-2009-3550

CVE-2009-3550 concerns the DCERPC/NT dissector in Wireshark. The vulnerability allows a remote attacker to cause a denial of service (NULL pointer dereference and application crash) by processing a file that records a malformed packet trace. Affected Wireshark versions are listed as 0.10.10–1.0.9...

CVE-2009-3550

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party...

Wireshark 1.2.2和1.0.9版本修复多个拒绝服务漏洞

BUGTRAQ ID: 36846 CVECAN ID: CVE-2009-3551,CVE-2009-3549,CVE-2009-3550,CVE-2009-2560 Wireshark之前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的Paltalk、DCERPC/NT、SMB和RADIUS协议解析模块中存在拒绝服务漏洞。如果用户受骗从网络抓取了恶意的报文或读取了恶意抓包文件的话，就会导致解析模块崩溃。 1...

Novell NetWare LSASS CIFS.NLM Driver Stack Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell NetWare...

Samba lsa_io_trans_names Heap Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Samba...

DCERPC TCP Service Auditor

Determine what DCERPC services are accessible over a TCP port This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DCERPC TCP Service Auditor', 'Description' = 'Determine what DCERPC services are...

ms08_067_netapi.rb.txt

$Id:$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...

CA-ArcServe

CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

SMB Session Pipe DCERPC Auditor

Determine what DCERPC services are accessible over a SMB pipe This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Session Pipe DCERPC Auditor', 'Description' = 'Determine what DCERPC services a...

openSUSE 10 Security Update : samba (samba-2584)

"A logic error in the deferred open code can lead to an infinite loop in Samba's smbd daemon. In addition the following changes are included with these packages : - Disable broken DCERPC funnel patch; 242833. - Avoid winbind event handler for internal domains. - Fix smbcontrol winbind offline;...

ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability

ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-055.html October 10, 2007 -- CVE ID: CVE-2007-2228 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 SP4 Windows XP SP2 Windows 2003 SP1 Windows...

Microsoft Windows DCERPC Authentication Denial of Service Vulnerability

This vulnerability allows remote attackers to crash systems with vulnerable installations of the Microsoft Windows operating system. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RPC runtime library rpcrt4.dll during the parsing of RPC-level...

lsa_transnames_heap-solaris.rb.txt

$Id: lsatransnamesheap.rb 5046 2007-07-12 00:41:00Z ramon $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

lsa_transnames_heap-linux.rb.txt

$Id: lsatransnamesheap.rb 4984 2007-06-09 02:25:31Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

lsa_transnames_heap-osx.rb.txt

$Id: lsatransnamesheap.rb 5059 2007-07-24 23:44:44Z ramon $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...