Security Best Practice: Familiarize Yourself with the Max Ping Size Protection

Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for packets sent from the local host to a destination computer, including the local host's own interfaces.Ping operates by sending Internet...

Asterisk 1.6 IAX - 'POKE' Requests Remote Denial of Service

source: https://www.securityfocus.com/bid/30321/info Asterisk is prone to a remote denial-of-service vulnerability because it fails to handle multiple 'POKE' requests in quick succession. Attackers can exploit this issue by sending a persistent stream of 'POKE' requests that will consume processo...

mtr: Stack-based buffer overflow

Background mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. Description Adam Zabrocki reported a boundary error within the splitredraw function in the file split.c, possibly leading to a stack-based buffer overflow. Impact A remote attack...

Universal honker CNN attack techniques parsing-vulnerability warning-the black bar safety net

Recently, CNN anchor, Carver te for the Chinese people with a strong discriminatory remarks, and CNN for this event the lack of sincerity of the apology and for the Chinese government's groundless accusations, roused the people of the country to strong indignation. So in some Patriotic art...

Attacking cisco router-bug warning-the black bar safety net

In you see Before you need to know: －what is IP address?－ What is ISP for?－ What is the TCP/IP data package?－ How to hide your IP address?－ How to use Telnet in?－ How to use HyperTerminal for?－ How to use Ping for?－ How to use TraceRoute it?－ How to use a proxy server?...

Nortel IP Phone DoS

Nortel IP phone DoS Discovered: 2008-02-25 Tested on firmware: 0604DAS Latest firmwares have also been tested. Welcome the return of the Ping of Death! wait a minute...isn't this 2008? Steps to reproduce: 1. ping -s 65500 ip of the phone Thanks to Spithash and the [email protected] crew...

Nortel UNIStim IP Phone - Remote Ping Denial of Service

Nortel UNIStim IP Phone - Remote Ping Denial of Service source: https://www.securityfocus.com/bid/28004/info Nortel UNIStim IP Phone products are prone to a remote denial-of-service vulnerability because the software fails to properly handle unexpected network datagrams. Successfully exploiting...

Nortel UNIStim IP Phone - Remote Ping Denial of Service

source: https://www.securityfocus.com/bid/28004/info Nortel UNIStim IP Phone products are prone to a remote denial-of-service vulnerability because the software fails to properly handle unexpected network datagrams. Successfully exploiting this issue allows remote attackers to crash affected...

LANDesk Ping Discovery Service Detection

The remote service is a Ping Discovery Service, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29993; scriptversion"1.11";...

CCProxy Telnet Proxy Ping remote stack overflow analysis-vulnerability warning-the black bar safety net

By: mad Dog-B. C. T Simple to understand a bit of the vulnerability reason, the problem lies in the ping, the first to trigger this vulnerability see the effect. Turn on the CC, and then telnet 127.0.0.1 2 3, appeared the following tips CCProxy TelnetCCProxy Telnet Service Ready. CCProxy Telnet...

Unfixed XSS vulnerability at www.xentek.co.uk

Security researcher T-Ping, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting www.xentek.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is currently...

CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

Unfixed XSS vulnerability at www.maildome.com

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.maildome.com, which at the time of submission ranked 524733 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is current...

Unfixed XSS vulnerability at mailaw.net

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting mailaw.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.vipemail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.vipemail.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at mail.unbreakable.ch

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting mail.unbreakable.ch, which at the time of submission ranked 7360714 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.fick-mit.com

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.fick-mit.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is currently...

CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

Unfixed XSS vulnerability at www.doctormd.net

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.doctormd.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is currently...

PT-2007-4307 · Alcatel · Alcatel Omnipcx Enterprise Communication Server

Name of the Vulnerable Software and Affected Versions: Alcatel OmniPCX Enterprise Communication Server versions R7.1 and earlier Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action. This is related to the...