Code injection

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

CVE-2006-1067

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

CVE-2006-1067

CVE-2006-1067 affects Linksys WRT54G routers versions 5 running VXWorks. The vulnerability allows remote attackers to trigger a denial-of-service by sending a malformed DCC SEND string to an IRC channel, causing an IRC connection reset. The issue may be related to masquerading code for NAT enviro...

CVE-2006-1068

Affected products: Netgear 614 and 624 routers (likely VXWorks). Vulnerability: remote attacker can cause a denial of service by sending a malformed DCC SEND string to an IRC channel, leading to an IRC connection reset. Possible cause: linked to masquerading code for NAT environments; details men...

CVE-2006-1067

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

DOS во встроенном NAT сервере Windows 2000

Обнаружил dos во встроенном NAT сервере Windows 2000 Конфигурация проверенных серверов: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 с установленным NAT сервером. При прохождении ip пакетов через сервер, с включенной опцией "Loose Source and Record...

CVE-2006-0036

ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service memory corruption or crash via an inbound PPTPINCALLREQUEST packet that causes a null pointer to be used in an offset calculation...

Null pointer dereference

ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service memory corruption or crash via an inbound PPTPINCALLREQUEST packet that causes a null pointer to be used in an offset calculation...

CVE-2006-0037

ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service memory corruption or crash via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linea...

Memory corruption

ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service memory corruption or crash via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linea...

CVE-2006-0036

CVE-2006-0036 affects the Linux kernel (2.6.14 and other versions) via the ip_nat_pptp code in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c). The vulnerability occurs when processing an inbound PPTP_IN_CALL_REQUEST packet, which can trigger a null pointer dereference in an offset calculati...

VMware vmnat.exe/vmnet-natd Multiple FTP Command Remote Overflow

According to its version number, the VMware program on the remote host may allow an attacker to execute code on the system hosting the VMware instance. The vulnerability can be exploited by sending specially crafted FTP PORT and EPRT requests. To be exploitable, the VMware system must be configur...

Linux kernel multiple DoS conditions

Local DoS with netlinkrcvskb, few DoS conditions with PPTP NAT...

[SA18482] Linux Kernel Multiple Denial of Service Vulnerabilities

TITLE: Linux Kernel Multiple Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA18482 VERIFY ADVISORY: http://secunia.com/advisories/18482/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTION: Some...

GLSA-200601-04 : VMware Workstation: Vulnerability in NAT networking

The remote host is affected by the vulnerability described in GLSA-200601-04 VMware Workstation: Vulnerability in NAT networking Tim Shelton discovered that vmnet-natd, the host module providing NAT-style networking for VMware guest operating systems, is unable to process incorrect 'EPRT' and...

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow 2 !/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote "estara softphone" exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060...

VMware Workstation: Vulnerability in NAT networking

Background VMware Workstation is a powerful virtual machine for developers and system administrators. Description Tim Shelton discovered that vmnet-natd, the host module providing NAT-style networking for VMware guest operating systems, is unable to process incorrect 'EPRT' and 'PORT' FTP request...

VMware vulnerability in NAT networking

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VULNERABILITY SUMMARY A vulnerability has been discovered in vmnat.exe on Windows hosts and vmnet-natd on Linux systems. The vulnerability makes it possible for a malicious guest using a NAT networking configuration to execute unwanted code on the hos...

VMWare desktop virtualization software buffer overflow

Buffer overflow in host system during VMNat NAT port translation on oversized FTP PORT or EPRT command...

CVE-2005-4459

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted 1 EPRT and 2 PORT FTP commands...