avahi security update

CentOS Errata and Security Advisory CESA-2009:0013 Updated avahi packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Avahi is an implementation of the DNS Service...

Avahi: Denial of service

Background Avahi is a system that facilitates service discovery on a local network. Description Hugo Dias reported a failed assertion in the originatesfromlocallegacyunicastsocket function in avahi-core/server.c when processing mDNS packets with a source port of 0. Impact A remote attacker could...

RedHat Security Advisory RHSA-2009:0013

The remote host is missing updates announced in advisory RHSA-2009:0013. Hugo Dias discovered a denial of service flaw in avahi-daemon. A remote attacker on the same local area network LAN could send a specially-crafted mDNS Multicast DNS packet that would cause avahi-daemon to exit unexpectedly...

RedHat Security Advisory RHSA-2009:0013

The remote host is missing updates announced in advisory RHSA-2009:0013. Hugo Dias discovered a denial of service flaw in avahi-daemon. A remote attacker on the same local area network LAN could send a specially-crafted mDNS Multicast DNS packet that would cause avahi-daemon to exit unexpectedly...

RHEL 5 : avahi (RHSA-2009:0013)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2009:0013 advisory. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zeroconf Networking. It facilitates service discovery on...

Avahi < 0.6.24 (mDNS Daemon) Remote Denial of Service Exploit

No description provided by source. / cve-2008-5081.c Avahi mDNS Daemon Remote DoS 0.6.24 Jon Oberheide [email protected] http://jon.oberheide.org Usage: gcc cve-2008-5081.c -ldnet -o cve-2008-5081 ./cve-2008-5081 1.2.3.4 Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081...

Avahi 0.6.24 - mDNS Daemon Remote Denial of Service

Avahi 0.6.24 - mDNS Daemon Remote Denial of Service / cve-2008-5081.c Avahi mDNS Daemon Remote DoS http://jon.oberheide.org Usage: gcc cve-2008-5081.c -ldnet -o cve-2008-5081 ./cve-2008-5081 1.2.3.4 Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081 Crafted mDNS packet with...

Avahi < 0.6.24 - mDNS Daemon Remote Denial of Service

/ cve-2008-5081.c Avahi mDNS Daemon Remote DoS http://jon.oberheide.org Usage: gcc cve-2008-5081.c -ldnet -o cve-2008-5081 ./cve-2008-5081 1.2.3.4 Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081 Crafted mDNS packet with source port 0 can cause avahi-daemon to abort due to...

Avahi < 0.6.24 (mDNS Daemon) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ============================================================= Avahi http://jon.oberheide.org Usage: gcc cve-2008-5081.c -ldnet -o cve-2008-5081 ./cve-2008-5081 1.2.3.4 Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081...

USN-696-1: Avahi vulnerabilities

Emanuele Aina discovered that Avahi did not properly validate its input when processing data over D-Bus. A local attacker could send an empty TXT message via D-Bus and cause a denial of service failed assertion. This issue only affected Ubuntu 6.06 LTS. CVE-2007-3372 Hugo Dias discovered that Ava...

CVE-2008-5081

The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...

CVE-2008-5081

The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...

Design/Logic Flaw

The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...

CVE-2008-5081

The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...

CVE-2008-5081

CVE-2008-5081 affects Avahi; the avahi-daemon process in Avahi before version 0.6.24 is vulnerable to a remote denial of service. A crafted mDNS packet with a source port of 0 can trigger an assertion in originates_from_local_legacy_unicast_socket() and cause the daemon to crash or exit. Public s...

CVE-2008-5081

The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...

CVE-2008-5081

The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...

OS Identification : mDNS

This script attempts to identify the Operating System type and version by looking at the data returned by the mDNS server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25245; scriptversion"1.8"; scriptcvsdate"Date: 2020/01/22"; name"english" = "OS Identification :...

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption http://dvlabs.tippingpoint.com/advisory/TPTI-07-06 May 2, 2007 -- CVE ID: CVE-2007-2418 -- Affected Vendor: Cerulean Studios -- Affected Products: Trillian Pro 3.1 build 121 and below -- TippingPointTM IPS Customer Protection:...

MOAB-29-01-2007: Apple iChat Bonjour Multiple Denial of Service Vulnerabilities

Summary The vendor Apple provides the following description of Bonjour and iChat: Bonjour, also known as zero-configuration networking, enables automatic discovery of computers, devices, and services on IP networks. Bonjour uses industry standard IP protocols to allow devices to automatically...