Mandriva Update for iputils MDVSA-2010:138 (iputils)

Check for the Version of iputils OpenVAS Vulnerability Test Mandriva Update for iputils MDVSA-2010:138 iputils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

[ MDVSA-2010:138 ] iputils

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:138 http://www.mandriva.com/security/ Package : iputils Date : July 23, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Ovidiu Mara reported a...

iputils ping DoS

Utility may hang on server response parsing...

Nagios3 - 'statuswml.cgi' 'Ping' Command Execution (Metasploit)

$Id: nagios3statuswmlping.rb 9829 2010-07-14 18:23:47Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

irc-unrealircd-backdoor NSE Script

Checks if an IRC server is backdoored by running a time-based command ping and checking how long it takes to respond. The irc-unrealircd-backdoor.command script argument can be used to run an arbitrary command on the remote system. Because of the nature of this vulnerability the output is never...

CVE-2010-2293

The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size...

CVE-2010-2292

Cross-site scripting XSS vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script or HTML via the IP field...

Input validation

The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size...

CVE-2010-2292

CVE-2010-2292 is a cross-site scripting (XSS) vulnerability in the Ping tools web interface of the D-Link Di-604 router. The issue allows remote attackers to inject arbitrary web script or HTML via the IP field. According to the NVD entry, the vulnerability has a CVSS v2 base score of 4.3 (Medium...

CVE-2010-2293

The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size...

Dlink Di-604 router authenticated user ping tool Xss and DoS

DCA-0001 Dlink Di-604 router authenticated user ping tool Xss and DoS vendor product description The DI-604 combines the latest advancements in chip technology, low-cost design and manufacturing with new, feature-rich firewall and network management controls to give you quite possibly the most...

linux/x86 sys_execve("/bin/sh", "-c", "ping localhost") 55 bytes

Exploit for linux/x86 platform in category shellcode ========================================================================== linux/x86 sysexecve"/bin/sh", "-c", "ping localhost" shellcode 55 bytes ==========================================================================...

Linux/x86 - execve(/bin/sh, -c, ping localhost) Shellcode (55 bytes)

Linux/x86 - execve/bin/sh, -c, ping localhost Shellcode 55 bytes. Shellcode exploit for Linuxx86 platform / Name : 55 bytes sysexecve"/bin/sh", "-c", "ping localhost" x86 linux shellcode Date : may, 31 2010 Author : gunslinger Web : devilzc0de.com blog : gunslinger.devilzc0de.com tested on : linu...

CCProxy <= 6.2 - Telnet Proxy Ping Overflow

CCProxy. CVE-2004-2416. Remote exploit for windows platform $Id: ccproxytelnetping.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

Nagios statuswml.cgi Command Injection

Added: 04/13/2010 CVE: CVE-2009-2288 BID: 35464 OSVDB: 55281 Background Nagios is a network host and service monitoring and management system. Problem The Nagios statuswml.cgi script passes unsanitized data to the ping and traceroute commands, resulting in shell command execution via...

Simple Network penetration spying on a command-vulnerability warning-the black bar safety net

ipconfig /all //You can view the current network card configuration information, including the domain and IP section This command can be seen: the host name---shwdm, IP--192.168.103.8, the gateway IP---192.168.103.10,DNS domain name resolution IP address---192.168.100.1 to an primary WINS server...

Debian DSA-1948-1 : ntp - denial of service

Robin Park and Dmitri Vinokurov discovered that the daemon component of the ntp package, a reference implementation of the NTP protocol, is not properly reacting to certain incoming packets. An unexpected NTP mode 7 packet MODEPRIVATE with spoofed IP data can lead ntpd to reply with a mode 7...

Debian DSA-1949-1 : php-net-ping - programming error

It was discovered that php-net-ping, a PHP PEAR module to execute ping independently of the Operating System, performs insufficient input sanitising, which might be used to inject arguments no CVE yet or execute arbitrary commands CVE-2009-4024 on a system that uses php-net-ping. %NASLMINLEVEL...

Design/Logic Flaw

Accellion Secure File Transfer Appliance before 80105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program...

CVE-2009-4644

The CVE-2009-4644 issue affects the Accellion Secure File Transfer Appliance, specifically versions prior to 8_0_105. It allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands by injecting shell metacharacters via the cli program (demonstrated wit...