CVE-2006-1941

CVE-2006-1941: Neon Responder 5.4 for LANsurveyor is affected. A crafted Clock Synchronisation packet can trigger an access violation, enabling remote attackers to cause a denial of service (partial availability impact). No remediation details are provided in the supplied documents.

Neon Responder (Dos,Exploit)

Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...

Neon Responder (Dos,Exploit)

Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...

Neon Responder LANsurveyor add-on DoS

Service crash on malformed TCP/4347 packet...

Neon Responder 5.4 (Clock Synchronization) Denial of Service Exploit

No description provided by source. / Stefan Lochbihler/ include stdio.h include stdlib.h include winsock2.h pragma commentlib,"ws232" define PORT 4347 char CLOCKMSG = "\x00\x0e\x5a\x00\x4c\xe9\x24\xb1\x17\x88\x40\x84"; //Password = "" void usage char; void endpgr char ,SOCKET, char; unsigned long...

Neon Responder 5.4 - Clock Synchronization Denial of Service

Neon Responder 5.4 - Clock Synchronization Denial of Service / Stefan Lochbihler/ include include include pragma commentlib,"ws232" define PORT 4347 char CLOCKMSG = "\x00\x0e\x5a\x00\x4c\xe9\x24\xb1\x17\x88\x40\x84"; //Password = "" void usage char; void endpgr char ,SOCKET, char; unsigned long...

Neon Responder 5.4 (Clock Synchronization) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================================== Neon Responder 5.4 Clock Synchronization Denial of Service Exploit ==================================================================== / Stefan Lochbihler/ include include...

Neon Responder 5.4 - Clock Synchronization Denial of Service

/ Stefan Lochbihler/ include include include pragma commentlib,"ws232" define PORT 4347 char CLOCKMSG = "\x00\x0e\x5a\x00\x4c\xe9\x24\xb1\x17\x88\x40\x84"; //Password = "" void usage char; void endpgr char ,SOCKET, char; unsigned long gethost char ; int mainint argc, char argv WSADATA wsa; SOCKET...

Neon Responders 5.4 - Remote Clock Synchronization Denial of Service

// source: https://www.securityfocus.com/bid/17569/info Neon Responders is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle malformed network packets. This issue allows remote attackers to crash the affected application,...

Neon Responders 5.4 - Remote Clock Synchronization Denial of Service

Neon Responders 5.4 - Remote Clock Synchronization Denial of Service // source: https://www.securityfocus.com/bid/17569/info Neon Responders is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle malformed network packets. Thi...

Debian DSA-487-1 : neon - format string

Multiple format string vulnerabilities were discovered in neon, an HTTP and WebDAV client library. These vulnerabilities could potentially be exploited by a malicious WebDAV server to execute arbitrary code with the privileges of the process using libneon. %NASLMINLEVEL 70300 C Tenable Network...

Debian DSA-506-1 : neon - buffer overflow

Stefan Esser discovered a problem in neon, an HTTP and WebDAV client library. User input is copied into variables not large enough for all cases. This can lead to an overflow of a static heap variable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

GLSA-200405-13 : neon heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200405-13 neon heap-based buffer overflow Stefan Esser discovered a vulnerability in the code of the neon library : if a malicious date string is passed to the nerfc1036parse function, it can trigger a string overflow into static...

GLSA-200405-04 : OpenOffice.org vulnerability when using DAV servers

The remote host is affected by the vulnerability described in GLSA-200405-04 OpenOffice.org vulnerability when using DAV servers OpenOffice.org includes code from the Neon library in functions related to publication on WebDAV servers. This library is vulnerable to several format string attacks...

GLSA-200404-14 : Multiple format string vulnerabilities in cadaver

The remote host is affected by the vulnerability described in GLSA-200404-14 Multiple format string vulnerabilities in cadaver Cadaver code includes the neon library, which in versions 0.24.4 and previous is vulnerable to multiple format string attacks. The latest version of cadaver uses version...

Neon < 0.24.7 WebDAV Client Library Unspecified Vulnerability

Binary data 1781.prm...

Neon < 0.23.8 Status Response Control Character Inclusion Vulnerability (deprecated)

Binary data 1778.prm...

Neon < 0.24.6 WebDAV Client Library ne_rfc1036_parse Function Heap Overflow

Binary data 1780.prm...

Fedora Core 1 : neon-0.24.5-2.1 (2004-129)

Stefan Esser discovered a flaw in the neon library which allows a heap buffer overflow in a date parsing routine. An attacker could create a malicious WebDAV server in such a way as to allow arbitrary code execution on the client should a user connect to it using a neon-based application which us...

Fedora Core 1 : neon-0.24.5-1 (2004-103)

Multiple format string vulnerabilities in neon 0.24.4 and earlier allow remote malicious WebDAV servers to execute arbitrary code. Updated packages were made available in April 2004 however the original update notification email did not make it to fedora-announce-list at that time. Note that...