security flaw

The Internet Group Management Protocol IGMP allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from...

CVE-2005-4766

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization messages by sniffing the multicast traffic...

CVE-2002-2185

The Internet Group Management Protocol IGMP allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from...

spank.c

Your machine answers to TCP packets that are coming from a multicast address. This is known as the 'spank' denial of service attack. OpenVAS Vulnerability Test $Id: spank.nasl 8145 2017-12-15 13:31:58Z cfischer $ spank.c Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This program ...

'spank' Denial of Service Vulnerability

The remote host answers to TCP packets that are coming from a multicast address. This is known as the SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

security flaw

Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via 1 the ipmcsource function, which decrements a counter to -1, or 2 the igmpmarksources function, whi...

security flaw

Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via 1 the ipmcsource function, which decrements a counter to -1, or 2 the igmpmarksources function, whi...

Altiris Deployment Server server spoofing

Mutual authentication absence and multicast based server detection allow to spoof server and obtain full control under managed network...

Linux Kernel 2.6.3 - setsockopt Local Denial of Service

Linux Kernel 2.6.3 - setsockopt Local Denial of Service / setsockopt proof of concept code by Julien TINNES julien a.t cr0.org vulnerability found as always by Paul Starzetz This is only a lame POC which will crash the machine, no root shell here. Maybe later, when everybody will have an updated...

TCP/IP Multicast Address Handling Remote DoS (spank.c)

Nessus has detected that the remote host responds to TCP packets that are coming from a multicast IP address. An attacker can exploit this to conduct a 'spank' denial of service attack, resulting in the host being shut down or network traffic reaching saturation. Also, this vulnerability can be...

MS Windows 2000 RSVP Server Authority Hijacking PoC Exploit

No description provided by source. // Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking // // A problem has been identified in the RSVP Server for Microsoft Windows 2000 that // may allow an attacker to hijack management of the network. This could allow an // attacke...

IGMP denial of service vulnerability

Topic : IGMP denial of service vulnerability Date : June 14, 2002 Credit : krishna, arun, [email protected] Site : http://www.cs.ucsb.edu/krishna/igmpdos/ Description ------------ The IGMP report suppression mechanism can be exploited for launching an insider denial of service attack against a ho...

CVE-1999-1423

CVE-1999-1423 concerns Solaris 2.3–2.6 where a local user can trigger a denial-of-service (crash) by sending a ping to a multicast address via the loopback interface (e.g., ping -i). The vulnerability is local in scope and results in an availability impact described as PARTIAL. The records consis...

CVE-2001-0796

Technical details (affected products, vulnerable components, root cause, patch info) are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2001-0796

SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a small response delay...

CVE-1999-1423

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service crash via a ping request to a multicast address through the loopback interface, e.g. via ping -i...

CVE-1999-1423: Undefined Security Weakness

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service crash via a ping request to a multicast address through the loopback interface, e.g. via ping -i...

CVE-2001-0796: Undefined Security Weakness

SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a small response delay...

CVE-2001-0796

SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a small response delay...

Microsoft Windows Media Player Buffer Overflow Vulnerability

The same old story again, this time with Netshow multicast redirector files. Check out the attachment. Open the .html. Your EIP gets busted. beware: IE crashes too so your windows get lost There is a whole lot of these in dxmasf.dll. This is just too fun to post them one at the time. Many more...