4049 matches found
Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability
Cisco Unified Communications Manager IM and Presence Service contains a denial of service DoS vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Exploitation of this vulnerability could cause an interruption of presence services. Cisco h...
Apache Subversion 1.7.x < 1.7.11 / 1.8.x < 1.8.1 DoS
Binary data 6963.prm...
Samsung TV - DoS vulnerability
Author: Malik Mesellem - @MMEIT - http://www.itsecgames.com Type: Denial of Service DoS attack Description: DoS vulnerability on some Samsung TVs The web server DMCRUIS/0.1 on port TCP/5600 is crashing by sending a long HTTP GET request Tested successfully on my Samsung PS50C7700 plasma TV...
Cisco TelePresence CVE-2013-3377 Malformed SIP Packet Handling Remote DoS
According the self-reported version returned by the SNMP service on the remote device, it is affected by a denial of service vulnerability that can be triggered by sending a specially crafted SIP packet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69048;...
Fedora 17 : gnutls-2.12.23-2.fc17 (2013-9799)
Important security update - possible DoS of both client and server. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Nokia 1280 Denial Of Service
Exploit Title: Nokia 1280 DoS Vulnerability Author : Un0wnX E-Mail : [email protected] Date : Monday, July 01,2013 Product: http://www.nokia.com/in-en/phones/phone/nokia-1280/ Vulnerability Advisory ======================= You can send a SMS containing the malicious buffer and can crash the phon...
SuSE 11.2 / 11.3 Security Update : GnuTLS (SAT Patch Numbers 7781 / 7918)
This update of GnuTLS fixes a regression introduced by the previous update that could have resulted in a Denial of Service application crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...
DoS vulnerability in Mozilla Firefox and Microsoft Internet Explorer
Hello 3APA3A! I want to warn you about Denial of Service vulnerability in Mozilla Firefox and Microsoft Internet Explorer. Earlier Jean Pascal Pereira has found DoS vulnerability in browser Firefox 14.0.1 http://1337day.com/exploit/description/19201. And at 07.04.2013 I've checked this...
Fedora 18 : libvirt-0.10.2.5-1.fc18 (2013-8681)
Rebased to version 0.10.2.5 - Fix creating snapshot on lvm pool bz 955371 - Properly escape audit paths bz 922186 - Follow updated packaging guidelines for user alloc bz 924501 - CVE-2013-1962 Open files DoS bz 963789, bz 953107 Note that Tenable Network Security has extracted the preceding...
Cisco IPS SensorApp Regex Processing Denial of Service Vulnerability
Cisco Intrusion Prevention System IPS SensorApp contains a vulnerability that could allow a local attacker to cause a denial of service DoS condition. The vulnerability is due to a job failure in the Regex hardware when processing the control transaction getENGVirtualSensorStatistics. A local...
Xen PV DoS vulnerability with SYSENTER
ISSUE DESCRIPTION The SYSENTER instruction can be used by PV guests to accelerate system call processing. This instruction, however, leaves the EFLAGS register mostly unmodified - in particular, the NT flag doesn't get cleared. If the hypervisor subsequently uses IRET to return to the guest which...
DoS vulnerability in Internet Explorer (access violation)
Hello 3APA3A! I want to warn you about Denial of Service vulnerabilities in Internet Explorer. This is access violation. I've made the exploit and tested this vulnerability at 13.02.2013. This exploit is based on video by TheSecuritylab for IE7. As I've tested, it also works in IE6 and IE8...
CVE-2013-1189
Cisco uBR10000 Series routers are affected by CVE-2013-1189 when a dual-stack IPv4/IPv6 modem is connected. An unauthenticated, adjacent attacker who can access the internal network and manipulate IPv4/IPv6 address assignments on the modem can trigger a reload of the routing engine, causing a den...
Cisco IOS Software Zone-Based Policy Firewall Session Initiation Protocol Inspection Denial of Service Vulnerability (cisco-sa-20130327-cce)
Cisco IOS Software contains a memory leak vulnerability that could be triggered through the processing of malformed Session Initiation Protocol SIP messages. Exploitation of this vulnerability could cause an interruption of services. Only devices that are configured for SIP inspection are affecte...
Fedora 17 : ruby-1.9.3.392-29.fc17 (2013-3038)
The new version 1.9.3 patchlevel 392 is released. A bug was found in the previous ruby that unrestricted entity expansion can lead to a DoS vulnerability in REXML. This new rpm will fix this issue. Note that Tenable Network Security has extracted the preceding description block directly from the...
Dell PowerConnect 6248P series switch denial of service vulnerability
Overview Dell PowerConnect 6248P series switches contain a denial of service vulnerability when parsing malformed requests. Description Dell PowerConnect 6248P series switches contain a denial of service vulnerability when parsing malformed requests which could cause the switch to crash and becom...
FreeBSD : FreeBSD -- BIND remote DoS with deliberately crafted DNS64 query (4671cdc9-7c6d-11e2-809b-6c626d99876c)
Problem description : Due to a software defect a crafted query can cause named8 to crash with an assertion failure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...
DEBIAN-CVE-2013-0269
The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...
Microsoft ASP.NET MS-DOS Device Name DoS (PCI-DSS check)
The web server running on the remote host appears to be using Microsoft ASP.NET, and may be affected by a denial of service vulnerability. Requesting a URL containing an MS-DOS device name can cause the web server to become temporarily unresponsive. An attacker could repeatedly request these URLs...