EUVD-2013-6802

Malware in sbrugna...

EUVD-2013-6801

Malware in sbrugna...

MMS Exploit Part 4: MMS Primer, Completing the ASLR Oracle

Posted by Mateusz Jurczyk, Project Zero This post is the fourth of a multi-part series capturing my journey from discovering a vulnerable little-known Samsung image codec, to completing a remote zero-click MMS attack that worked on the latest Samsung flagship devices. New posts will be published ...

CVE-2013-7000

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection...

CVE-2013-7001

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway before 2013.11.15 allows remote attackers to cause a denial of service via a malformed MM1 message that is routed to a 1 MM4 or 2 MM7 connection...

Memory corruption

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway before 2013.11.15 allows remote attackers to cause a denial of service via a malformed MM1 message that is routed to a 1 MM4 or 2 MM7 connection...

Design/Logic Flaw

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection...

CVE-2013-7001

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway before 2013.11.15 allows remote attackers to cause a denial of service via a malformed MM1 message that is routed to a 1 MM4 or 2 MM7 connection...

CVE-2013-7000

CVE-2013-7000 affects the Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26. The vulnerability allows remote attackers to cause a denial of service by sending a malformed MM4 message over the MM4 connection, impacting availability. Affected component: MMSC in NowSMS. R...

CVE-2013-7000

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection...

CVE-2013-7001

CVE-2013-7001 concerns NowSMS Now SMS & MMS Gateway prior to 2013.11.15. The MMSC may trigger a denial of service when processing a malformed MM1 message that is routed to a MM4 or MM7 connection. Affected component: Multimedia Messaging Centre (MMSC) in NowSMS gateway. Underlying cause: malforme...

Now SMS/MMS Gateway HTTP/SMPP请求栈溢出漏洞

BUGTRAQ ID: 27896 CVECAN ID: CVE-2008-0871 Now SMS/MMS Gateway（NowSMS）是一套短信和彩信内容交付解决方案。 NowSMS监听在8800端口上的Web接口允许用户使用网关发送各种类型的消息，该接口上用于处理HTTP Authorization参数中base64口令的函数存在栈溢出漏洞。如果用户发送了超过256字节的报文的话，就可以触发这个溢出，导致执行任意指令。...

NowSMS SMS/MMS gateway multiple security vulnerabilities

Buffer overflows on authentication and on SMPP packets parsing...

Multiple buffer-overflow in NowSMS v2007.06.27

Luigi Auriemma Application: Now SMS/MMS Gateway http://www.nowsms.com Versions: = v2007.06.27 Platforms: Windows Bugs: A web authorization buffer-overflow B SMPP buffer-overflow Exploitation: remote Date: 19 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introducti...