EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II

Here we go again. -Marc ------------------ Microsoft RPC Heap Corruption Vulnerability - Part II Release Date: September 10, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Server 4.0 Microsoft Windows NT Server 4.0, Terminal...

Coda RPC2 Denial of Serviec

,'| .-''-.....--'; / '. ..-' , ,--...--''' .--''' /' -';' ; ; ; ...--'' ...--..' .;.' fL ,....----''' ,..--'' felinemenace.org Program: Coda 6.0.1 and probably below Impact: Denial of service of all programs using RPC2 Discovered: Andrew Griffiths 1 Background Coda is an advanced network filesyst...

CVE-2003-0506

Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service shutdown of NetMeeting conference via malformed packets, as demonstrated via the chat conversation...

CVE-2003-0305

The Service Assurance Agent SAA in Cisco IOS 12.0 through 12.2, aka Response Time Reporter RTR, allows remote attackers to cause a denial of service crash via malformed RTR packets to port 1967...

Novell Netware 6.0 / eDirectory 8.7 - HTTPSTK.NLM Remote Abend

source: https://www.securityfocus.com/bid/7841/info It has been reported that the HTTP Stack distributed with Novell Netware and eDirectory does not properly handle some types of malformed packets. Because of this, an attacker may be able to cause a denial of service to legitimate users of the HT...

Novell Netware 6.0 eDirectory 8.7 - HTTPSTK.NLM Remote Abend

Novell Netware 6.0 eDirectory 8.7 - HTTPSTK.NLM Remote Abend source: https://www.securityfocus.com/bid/7841/info It has been reported that the HTTP Stack distributed with Novell Netware and eDirectory does not properly handle some types of malformed packets. Because of this, an attacker may be ab...

CVE-2003-0260

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service slowdown and possibly reload via a flood of malformed ICMP packets...

CVE-2003-0305

The Service Assurance Agent SAA in Cisco IOS 12.0 through 12.2, aka Response Time Reporter RTR, allows remote attackers to cause a denial of service crash via malformed RTR packets to port 1967...

[EXPL] Half-Life Exploit Code Released (Malformed Packet)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

CVE-2003-0110

The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration ISA Server 2000 allow remote attackers to cause a denial of service CPU consumption or packet storm via a spoofed, malformed packet to UDP port 1745...

Cisco IOS SSH Large Packet CPU Consumption DoS (CSCdw33027)

It is possible to make the remote IOS crash when sending it malformed SSH packets. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11381; scriptversion"1.26"; scriptcveid"CVE-2002-1024"; scriptbugtraqid5114; scriptnameenglish:"Cisco IOS SSH Large Packet CPU Consumption...

CVE-2003-0001

Multiple ethernet Network Interface Card NIC device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak...

CVE-2003-0001

Multiple ethernet Network Interface Card NIC device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak...

CVE-2002-2294

Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service service termination via 1 malformed RealAudio rad packets...

CVE-2002-2079

mosix-protocol-stack in Multicomputer Operating System for UnIX MOSIX 1.5.7 allows remote attackers to cause a denial of service via malformed packets...

CVE-2002-1356

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed packets to the 1 LMP, 2 PPP, or 3 TDS dissectors, possibly related to a missing field for EndVerifyAck messages...

SSH Malformed Packet Vulnerabilities

...

CVE-2002-1356

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed packets to the 1 LMP, 2 PPP, or 3 TDS dissectors, possibly related to a missing field for EndVerifyAck messages...

Windows 2000/XP PPTP buffer overflow

Malformed PPTP packets causes service to crash...

Microsoft Windows XP/2000/NT 4.0 - RPC Service Denial of Service (1)

// source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This vulnerability was originally...