13 matches found
EUVD-2008-3895
Malware in sbrugna...
PwnPi - A Pen Test Drop Box distro for the Raspberry Pi
PwnPi is a Linux-based penetration testing dropbox distribution for the Raspberry Pi. It currently has 200+ network security tools pre-installed to aid the penetration tester. It is built a stripped down version of the Debian Wheezy image from the Raspberry Pi foundation's website and uses Openbo...
Dns2tcp 'dns_decode.c'远程缓冲区溢出漏洞
BUGTRAQ ID: 32071 CNCAN ID:CNCAN-2008110402 Dns2tcp是在DNS报文中分装TCP会话的一套工具。 Dns2tcp 'dnsdecode.c'存在缓冲区溢出,远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Herve Schauer Consultants HSC Dns2tcp 0.4.1 Herve Schauer Consultants HSC Dns2tcp 0.4 Herve Schauer Consultants HSC Dns2tcp 0.4 Herve Schauer Consultants H...
Dns2tcp "dns_decode()"缓冲区溢出漏洞
Dns2tcp是一种通过DNS通信转发TCP流量的网络工具。 Dns2tcp的实现上存在缓冲溢出漏洞,远程攻击攻击者可能利用此漏洞在服务器上执行任意指令。漏洞存在于server/dnsdecode.c文件的dnsdecode函数中,攻击者可以利用此漏洞通过构造恶意输入导致缓冲区溢出。 HSC Dns2tcp 厂商补丁: HSC --- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.hsc.fr/ressources/outils/dns2tcp/index.html.en...
Dns2TCP Service Detection
Binary data 4657.prm...
Dns2tcp远程缓冲区溢出漏洞
BUGTRAQ ID: 31080 CVE ID:CVE-2008-3910 CNCVE ID:CNCVE-20083910 Dns2tcp是一款允许在DNS报文中封装TCP会话的工具。 Dns2tcp存在多个缓冲区溢出,远程攻击者可以利用漏洞以应用程序权限执行任意任意指令。 目前没有详细漏洞细节提供。 Herve Schauer Consultants HSC Dns2tcp 0.4 升级到最新版本: Herve Schauer Consultants HSC Dns2tcp 0.4 Herve Schauer Consultants HSC dns2tcp-0.4.1.tar.gz...
CVE-2008-3910
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...
CVE-2008-3910
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...
CVE-2008-3910
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...
DEBIAN-CVE-2008-3910
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...
Code injection
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...
CVE-2008-3910
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...
CVE-2008-3910
CVE-2008-3910 affects dns2tcp before 0.4.1. The vulnerability arises in the handling of negative values in a certain length field passed to dns_simple_decode or dns_decode, allowing remote attackers to overwrite a buffer and cause unspecified other impact. The issue is described across multiple s...