CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

CVE-2007-5031

The CVE-2007-5031 issue affects Dibbler 0.6.0, specifically the TSrvOptIA_NA::rebind implementation in SrvOptions/SrvOptIA_NA.cpp. A remote attacker can trigger a NULL dereference and daemon crash by sending a REBIND message with an invalid IA_NA option, leading to a denial of service. Exploitati...

CVE-2007-5029

CVE-2007-5029 affects Dibbler 0.6.0. The issue is a lack of validation of certain length parameters for buffer sizes, enabling a remote attacker to trigger a buffer over-read and cause a denial of service (daemon crash). The described failure points are within the TSrvMsg constructor in SrvMessag...

CVE-2007-5029

Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a buffer over-read and cause a denial of service daemon crash, as demonstrated by incorrect behavior of the TSrvMsg constructor in SrvMessages/SrvMsg.cpp when 1...

CVE-2007-5030

CVE-2007-5030 affects Dibbler 0.6.0, where multiple integer overflows in handling options with large lengths lead to remote denial of service (daemon crash). The issues are triggered in several constructors and decoding routines, including TSrvMsg, TClntMsg, TClntOptIAAddress, TClntOptIAPrefix, T...

CVE-2007-5031

The TSrvOptIANA::rebind method in SrvOptions/SrvOptIANA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service NULL dereference and daemon crash via an invalid IANA option in a REBIND message...

CVE-2007-5030

Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service daemon crash via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by 1 the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the 2...

CVE-2007-5029

Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a buffer over-read and cause a denial of service daemon crash, as demonstrated by incorrect behavior of the TSrvMsg constructor in SrvMessages/SrvMsg.cpp when 1...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

CVE-2007-5030

Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service daemon crash via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by 1 the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the 2...

CVE-2007-5031

The TSrvOptIANA::rebind method in SrvOptions/SrvOptIANA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service NULL dereference and daemon crash via an invalid IANA option in a REBIND message...

CVE-2007-5028

CVE-2007-5028 affects Dibbler 0.6.0 on Linux. The issue is weak world-writable permissions for unspecified files in /var/lib/dibbler, with unknown impact and local attack vectors. Public documents from NVD, Red Hat, Ubuntu, Debian, OSV, and others corroborate the weak-permission description; no c...

Dibbler DHCPv6 server/client implementation multiple seucrity vulnerabilities

Reading behined allocated memory, NULL pointer dereferences, etc...

[Full-disclosure] [MU-200709-02] Dibbler Remote Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dibbler Remote Denial of Service Vulnerability MU-200709-02 September 18, 2007 http://labs.musecurity.com/advisories.html Affected Products/Versions: Dibbler 0.6.0 http://klub.com.pl/dhcpv6/ Product Overview: Dibbler is a portable DHCPv6 implementatio...