[Full-disclosure] CISCO Phone 7940 DOS vulnerability

MADYNES Security Advisory http://madynes.loria.fr Severity: High Title: Cisco 7940 SIP INVITE remote DOS Date: February 19, 2007 ID: KIPH2 Synopsis: After sending a cra fted INVITE message the device immediately reboots. The phone does not check properly the sipURI field of the Remote-Party-ID in...

[Full-disclosure] Asterisk SDP DOS vulnerability

MADYNES Security Advisory http://madynes.loria.fr/ http://madynes.loria.fr Title: Asterisk SIP INVITE remote DOS Release Date: 08/03/2007 Severity: High - Denial of Service Advisory ID:KIPH1 Software: Asterisk http://www.asterisk.org/ http://www.asterisk.org/ AsteriskR is a complete IP PBX in...

Citrix Metaframe Presentation Server Print Provider Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================================= Citrix Metaframe Presentation Server Print Provider Buffer Overflow PoC ======================================================================= / Proof of concept exploit for...

Citrix Metaframe Presentation Server Print Provider - Buffer Overflow (PoC)

/ Proof of concept exploit for ZDI - Citrix Metaframe spooler service vulnerability Microsoft Windows - EnumPrinter & EnumPrinterW Fuzzer v0.1 Author: Andres Tarasco Acuña - [email protected] url: http://www.514.es This is an intial version of EnumPrinter and OpenPrinter fuzzer. I hope that it will...

CVE-2006-6353

Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service application crash via unspecified vectors related to 1 certain KERNPROTECTIONFAILURE thread crashes and 2 certain KERNINVALIDADDRESS thread crashes, as discovered...

CVE-2006-6353

Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service application crash via unspecified vectors related to 1 certain KERNPROTECTIONFAILURE thread crashes and 2 certain KERNINVALIDADDRESS thread crashes, as discovered...

CVE-2006-6353

The CVE-2006-6353 entry affects Mac OS X, specifically the BOMArchiveHelper component. The vulnerability is described as multiple unspecified issues that allow user-assisted remote attackers to cause a denial of service (application crash). The impact is limited to availability (PARTIAL) with no ...

OWASP JBroFuzz 0.3 Fuzzer Released!

JBroFuzz is an OWASP Project that emerged from penetration testing. It deals with fuzzing stateless network protocols such as HTTP, SOAP, XML, LDAP, etc. Apart from fancy terminology, JBroFuzz 0.3 has inbuilt the following Generators ready to be used: basic cross site scripting checks XSS basic S...

MS Internet Explorer 6 Table.Frameset NULL Dereference Vulnerability

Exploit for unknown platform in category dos / poc ==================================================================== MS Internet Explorer 6 Table.Frameset NULL Dereference Vulnerability ==================================================================== // MoBB Demonstration function Demo var...

Different FTP servers multiple security vulnerabilities

Multiple vulnerabilities were uncovered with FTP Fuzzer stress test suite. - ArgoSoft FTP Server RNTO Unicode overflow - Golden FTP Server NLST overflow - FileZilla FTP Server MLSD - FileZilla remote server interface homemade protocol - WarFTPD various exceptions and WDM.exe overflow...

CVE-2006-2172

Buffer overflow in Gene6 FTP Server 3.1.0 allows remote authenticated attackers to cause a denial of service crash and possibly execute arbitrary code via a long argument to 1 MKD or 2 XMKD, as demonstrated by the Infigo FTPStress Fuzzer...

Buffer overflow

Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer...

CVE-2006-2170

Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer...

Buffer overflow

Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer...

Buffer overflow

Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long 1 PORT or 2 PASS followed by the MLSD command, or 2 the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer...

CVE-2006-2171

Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer...

CVE-2006-2171

CVE-2006-2171 describes a buffer overflow in WarFTP Daemon’s WDM.exe, allowing remote attackers to execute arbitrary code via unspecified arguments (demonstrated by the Infigo FTPStress Fuzzer). The vulnerability is characterized in the NVD entry as a network-facing issue with a medium base score...

CVE-2006-2180

Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service application crash and execute arbitrary code via a long argument to the 1 NLST or 2 APPE commands, as demonstrated by the Infigo FTPStress Fuzzer...

CVE-2006-2173

Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long 1 PORT or 2 PASS followed by the MLSD command, or 2 the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer...

CVE-2006-2171

Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer...