Design/Logic Flaw

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

CVE-2016-10728

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

CVE-2016-10728

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

PT-2018-4894

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 3.1.2 Description An issue was discovered where receiving an ICMPv4 error packet as the first packet on a flow in the to client direction confuses the rule grouping lookup logic. This causes the toclient inspection t...

CVE-2016-10728: Improper Input Validation

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

OpenTFTP SP 1.4 Error Packet Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'OpenTFTP SP 1.4...

NTP ntpd Mode 7 Error Response Packet Loop Remote DoS

The version of ntpd running on the remote host has a denial of service vulnerability. It responds to mode 7 error packets with its own mode 7 error packets. A remote attacker could exploit this by sending a mode 7 error response with a spoofed IP header, setting the source and destination IP...

TFTP Server Error Packet Handling Buffer Overflow (CVE-2008-2161)

TFTP server is an open source Trivial File Transfer Protocol server service provided for both Linux and Microsoft Windows platforms. The product facilitates the transfer of files to or from the server. A buffer overflow vulnerability exists in TFTP servers. The flaw is due to improper handling of...

TFTP Server error packet buffer overflow

Added: 09/12/2008 CVE: CVE-2008-2161 BID: 29111 OSVDB: 44904 Background TFTP Server is an open source server implementation of the tftp protocol for multiple platforms. Problem A buffer overflow vulnerability in the handling of error packets allows remote attackers to execute arbitrary commands...

CVE-2008-2161: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet. NOTE: some of these details are obtained from third party information...

TFTP Server for Windows 1.4 ST Remote BSS Overflow Exploit

No description provided by source. !/usr/bin/perl TFTPServer SP v1.4 for Windows remote .bss overflow exploit The Service or the RunStandAlone version. URL: http://sourceforge.net/projects/tftp-server/ Author: tix or tixxDZ [email protected] Date: 07/05/2008...

TFTP Server for Windows 1.4 ST Remote BSS Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== TFTP Server for Windows 1.4 ST Remote BSS Overflow Exploit ========================================================== !/usr/bin/perl TFTPServer SP v1.4 for Windows remote .bss...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

CVE-2006-4005

BomberClone 0.11.6 and earlier is affected by CVE-2006-4005. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending a malformed PKGF_ackreq packet that crashes rscache_add() in pkgcache.c, and by sending an error packet that, while intended for clients, t...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...