93 matches found
Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS)
The msnslpsiprecv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an SLP invite message that lacks certain required fields, as...
Out-of-bounds
ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service daemon crash via a large integer in this field in a packet to the Servic...
ExtremeZ-IP Multiple Remote Flaws
Binary data 4371.prm...
SLP Server Detection (UDP)
The remote server understands Service Location Protocol SLP, a protocol that allows network applications to discover the existence, location, and configuration of various services in an enterprise network environment. A server that understands SLP can either be a service agent SA, which knows the...
SLP Server Detection (TCP)
The remote server understands Service Location Protocol SLP, a protocol that allows network applications to discover the existence, location, and configuration of various services in an enterprise network environment. A server that understands SLP can either be a service agent SA, which knows the...
security flaw
Buffer overflow vulnerability in the unicodetobytes in the Service Location Protocol srvloc dissector packet-srvloc.c in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value...
[Full-disclosure] iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability
Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.20.05 www.idefense.com/application/poi/display?id=323&type=vulnerabilities October 20, 2005 I. BACKGROUND Ethereal is a full featured open source network protocol analyzer. For more information, see...
CVE-2005-3184
Buffer overflow vulnerability in the unicodetobytes in the Service Location Protocol srvloc dissector packet-srvloc.c in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value...
CVE-2005-3184
Buffer overflow vulnerability in the unicodetobytes in the Service Location Protocol srvloc dissector packet-srvloc.c in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value...
CVE-2005-3184
CVE-2005-3184 : A buffer overflow in the Unicode-to-bytes conversion in the SRVLOC dissector of Ethereal (packet-srvloc.c) can be triggered by a crafted srvloc packet with a modified length, enabling remote code execution. Affected product: Ethereal 0.10.x prior to the security fixes. The public ...
PT-2005-4004 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal affected versions not specified Description: A buffer overflow issue exists in the unicode to bytes function within the Service Location Protocol srvloc dissector. This allows remote attackers to execute arbitrary code by sending a...
security flaw
Multiple unknown vulnerabilities in the 1 AIM, 2 LDAP, 3 FibreChannel, 4 GSMMAP, 5 SRVLOC, and 6 NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash...