CVE-2008-3157

CVE-2008-3157 affects Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200. The vulnerability stems from not limiting concurrent sessions, enabling denial of service via a large number of sessions. The NVD lists a CVSS v2 base score of 5.0 (Medium) with network access, low attack complexity, a...

CVE-2008-3157: Undefined Security Weakness

Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service resource consumption via a large number of sessions...

Nortel SIP多媒体PC客户端会话处理拒绝服务漏洞

Nortel Networks公司推出的SIP多媒体PC客户端是一个功能全面的多媒体即时通讯工具。 SIP多媒体PC客户端没有限制可生成的连接或活动窗口的数量，未经认证的远程攻击者可以创建大量会话，直到系统无法处理，导致耗尽客户端系统上的可用资源。 Nortel Networks 多媒体PC客户端SIP电话 4.x Novell ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.novell.com/security-alerts...

CVE-2008-2218: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server MCS before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service crash via a flood of "extraneous" messages, as demonstrated by the Nessus "Generic flood" denial of servic...

Nortel SIP多媒体PC客户端远程报文洪水拒绝服务漏洞

BUGTRAQ ID: 28994 Nortel SIP多媒体PC客户端是基于PC的应用程序，可提供强大的多媒体通讯功能。 Nortel SIP处理大量报文时存在漏洞，远程攻击者可能利用此漏洞导致程序崩溃不可用。 如果使用Nessus扫描工具向Nortel SIP多媒体PC客户端发送了大量报文的话，就可能触发缓冲区溢出，导致客户端出现错误消息并终止。 Nortel Networks 多媒体PC客户端SIP电话 4.0 Nortel Networks 多媒体PC客户端SIP电话 3.5 Nortel Networks ---------------...

Wayport Public Access PC protection bypass

It's possible to disable protection by disabling Internet Explorer plugin...

CVE-2008-0706: Improper Authentication

Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...

CVE-2008-0211: Undefined Security Weakness

Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors...

KiSS PC-Link Server Detection (UDP)

The remote service is a PC-Link Server, used for streaming videos, music, and pictures to a KiSS player, and this port is used by a player when searching for a PC-Link server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31465; scriptversion"1.8";...

KiSS PC-Link Server Detection (TCP)

Binary data 4426.prm...

KiSS PC-Link Client Detection

Binary data 4428.prm...

KiSS PC-Link Server Detection (UDP)

Binary data 4427.prm...

KiSS PC-Link Server Detection (TCP)

The remote service is a PC-Link Server, used for streaming videos, music, and pictures to a KiSS player. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid31464; scriptversion"1.8";...

bmclassifieds-sql.txt

....... ...... ..... .....CoRPITX ..... ..... ...... ....... Turkey www.Hayalet-hack.com www.zone-turk.net/ Powered by BM Classifieds listingid,adSQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net Dork 1 : ''showad.php?listingid='' Dork 2 :...

[SECURITY] Fedora 8 Update: vdccm-0.10.1-1.fc8

Vdccm is a daemon running as the user on the desktop machine, which the Pocket PC connects to. This vdccm is a replacement of the original dccm and the vdccm comming with SynCE-KDE...

[SECURITY] Fedora 8 Update: librapi-0.11-1.fc8

The RAPI library is an open source implementation that works like RAPI.DLL, available on Microsoft operating systems. The library makes it possible to make remote calls to a computer running Pocket PC. In order to use librapi, a daemon that the Pocket PC client connects to mus t be running on the...

[SECURITY] Fedora 8 Update: synce-gnomevfs-0.11-1.fc8

This is a gnome-vfs module that enables access to the Windows CE or Pocket PC file system through the gnome-vfs functions...

CORE-2007-1106: SynCE Remote Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs SynCE Remote Command Injection Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL:...

ProWizard 4 PC多个远程栈溢出漏洞

BUGTRAQ ID: 26953 ProWizard（prowiz）是一款简单易用的音乐抓轨工具，支持旧型的MOD格式。 prowiz中的一些数组可能支持过多的单元，如果用户受骗处理了恶意音频文件的话就可以触发多个栈溢出，导致执行任意指令。 Sylvain Chipaux ProWizard 4 PC = 1.62 Sylvain Chipaux --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://asle.free.fr/prowiz/...

Stack overflow

Multiple stack-based buffer overflows in ProWizard 4 PC prowiz 1.62 and earlier allow remote attackers to execute arbitrary code via a crafted file to the 1 AMOS-MusicBank, 2 FuzzacPacker, and 3 QuadraComposer rippers; and 4 have an unknown impact via a crafted file to the SkytPacker ripper...