CORE-2006-0714: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service

Core Security Technologies Advisory http://www.coresecurity.com Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Service Date Published: 2006-08-14 Last Update: 2006-08-14 Advisory ID: CORE-2006-0714 Bugtraq ID: 19215 CVE Name: CVE-2006-3942 Title: Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Servi...

TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities

TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities http://www.tippingpoint.com/security/advisories/TSRT-06-07.html August 8, 2006 -- CVE ID: CVE-2006-3838 -- Affected Vendor: eIQnetworks -- Affected Products: Enterprise Security Analyzer --...

Cisco VPN Concentrator IKE resource exhaustion DoS Advisory

Cisco VPN Concentrator IKE resource exhaustion DoS Advisory 1. Overview NTA Monitor discovered a denial of service vulnerability in the Cisco VPN 3000 series concentrator products while performing a VPN security test for a customer in July 2005. The vulnerability affects Phase-1 of the IKE...

CVE-2006-3678

TippingPoint IPS running the TippingPoint Operating System TOS before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback L2FB", causing a denial of service page fault, via a malformed packet...

CVE-2006-3678

TippingPoint IPS running the TippingPoint Operating System TOS before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback L2FB", causing a denial of service page fault, via a malformed packet...

CVE-2006-3678

CVE-2006-3678 affects the TippingPoint IPS running the TippingPoint Operating System (TOS) prior to 2.2.4.6519. The issue allows remote attackers to force the device into layer 2 fallback (L2FB), causing a denial of service (page fault) by sending a malformed packet. The available documents speci...

Internet Key Exchange Protocol Version 1 Denial of Service Vulnerability

Multiple products contain a vulnerability in the implementation of the Internet Key Exchange IKE version 1 protocol. IKE is typically used for key exchange in IPSec, and IPSec is commonly used to encrypt data for VPN connections. The vulnerability affects IKE Phase 1 negotiations in both Main Mod...

CVE-2006-3596

The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System IPS 5.11 through 5.1p1, as installed on various Cisco Intrusion Prevention System 42xx appliances, allows remote attackers to cause a denial of service kernel panic and possibly network outage via a...

MS-RPC Programs Lookup (CVE-2006-1314)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

CVE-2006-3596

The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System IPS 5.11 through 5.1p1, as installed on various Cisco Intrusion Prevention System 42xx appliances, allows remote attackers to cause a denial of service kernel panic and possibly network outage via a...

CVE-2006-3596

CVE-2006-3596 affects Cisco IPS 5.1(1)–5.1(p1) on various 42xx appliances, where the Intel-based gigabit NIC driver can be triggered by a crafted IP packet to cause a kernel panic and potential network outage (denial of service). The vulnerability is rooted in the device driver used by Intel-base...

Cisco Intrusion Prevention System Malformed Packet Denial of Service

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Intrusion Prevention System DoS

Device failure on malformed network packet...

[Full-disclosure] Cisco Security Advisory: Cisco Intrusion Prevention System Malformed Packet Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Intrusion Prevention System Malformed Packet Denial of Service Advisory ID: cisco-sa-20060712-ips http://www.cisco.com/warp/public/707/cisco-sa-20060712-ips.shtml Revision 1.0 For Public Release 2006 July 12 1600 UTC GMT...

ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability

ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-021.html July 6, 2006 -- CVE ID: CVE-2006-3423 -- Affected Vendor: WebEx Communications -- Affected Products: WebEx Downloader Plug-in tested on v2.0.0.7 -- TippingPointTM IPS...

SEC-20060512-0.txt

SEC Consult Security Advisory 20060512-0 ============================================================== title: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure program: Symantec Enterprise FW vulnerable version: 8.0 homepage: www.symantec.com found: 2005-09-13 by: SEC Consult /...

[Full-disclosure] SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure

SEC Consult Security Advisory 20060512-0 ============================================================== title: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure program: Symantec Enterprise FW vulnerable version: 8.0 homepage: www.symantec.com found: 2005-09-13 by: SEC Consult /...

[Full-disclosure] ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow

ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-06-008.html April 13, 2006 -- CVE ID: CVE-2006-0092 -- Affected Vendor: Novell -- Affected Products: Novell GroupWise Messenger 2 -- TippingPointTM IPS Customer Protection:...

ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability

ZDI-06-007: Microsoft Windows Address Book WAB File Format Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-007.html April 11, 2006 -- CVE ID: CVE-2006-0014 -- Affected Vendor: Microsoft -- Affected Products: Windows XP SP2 Windows 2000 SP4 -- TippingPointTM IPS Customer...

TSRT-06-01: Symantec VERITAS NetBackup vnetd Buffer Overflow Vulnerability

TSRT-06-01: Symantec VERITAS NetBackup vnetd Buffer Overflow Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-01.html March 27, 2006 -- CVE ID: CVE-2006-0991 -- Affected Vendor: Symantec VERITAS -- Affected Products: VERITAS NetBackup 6.0 Client VERITAS NetBackup 6.0 Server -...