Linux Kernel < 2.6.16.18 (Netfilter NAT SNMP Module) Remote DoS Exploit

Exploit for linux platform in category dos / poc ======================================================================= Linux Kernel Yuri Gushin A patch review we did on the 2.6.16.17-18 Linux kernel source tree revealed a restructuring of code in the snmpparsemangle and the snmptrapdecode...

CVE-2006-2756: Undefined Security Weakness

Eitsop My Web Server 1.0 allows remote attackers to cause a denial of service application crash via a long GET request. NOTE: CVE analysis suggests that this is a different product, and therefore a different vulnerability, than CVE-2002-1897...

CVE-2006-2780: Improper Control of Generation of Code

Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via "jsstr tagify," which leads to memory corruption...

CVE-2006-2789: Undefined Security Weakness

Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service persistent crash via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used...

CVE-2006-2706: Undefined Security Weakness

Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 allows remote attackers to cause a denial of service via forged "session start" messages that cause AVR to connect to arbitrary hosts...

CVE-2006-0059: Undefined Security Weakness

Heap-based buffer overflow in the ISO Transport Service over TCP RFC 1006 implementation of LiveData ICCP Server before 5.00.035 allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets...

CVE-2006-2413: Undefined Security Weakness

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

Linux SCTP ECNE Chunk Handling Remote DoS

There is a flaw in the SCTP code included in Linux kernel versions 2.6.16.x that results in a kernel panic when an SCTP packet with an unexpected ECNE chunk is received in a CLOSED state. An attacker can leverage this flaw to crash the remote host with a single, possibly forged, packet. C Tenable...

CVE-2006-2272: Undefined Security Weakness

Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service kernel panic via incoming IP fragmented 1 COOKIEECHO and 2 HEARTBEAT SCTP control chunks...

Linux SCTP Functionality Multiple Remote DoS

There is a flaw in the Linux kernel on the remote host that causes a kernel panic when it receives an SCTP packet with a chunk data packet of length 0. An attacker can leverage this flaw to crash the remote host. Additionally, other types of crafted packets can cause a remote denial of service in...

CVE-2006-2213: Undefined Security Weakness

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2095: Undefined Security Weakness

Phex before 2.8.6 allows remote attackers to cause a denial of service application hang by initiating multiple chat requests to a single user and then logging off...

CVE-2006-2078: Undefined Security Weakness

Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and E20/E30, allow remote attackers to cause a denial of service via crafted DNS messages that trigger errors in 1 ProxyDNS or 2 PKI-Resolver, as demonstrated by the OUSPG PROTOS DN...

BL4 SMTP Server < 0.1.5 - Remote Buffer Overflow (PoC)

!/usr/bin/perl use IO::Socket; use Socket; my$socket = ""; if$ARGV 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = "25" ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto="tcp", PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die "Error: cant connect to $adr:$prt\n"; print " -- Connecting T...

CVE-2006-2054: Undefined Security Weakness

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-1937: Undefined Security Weakness

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via 1 multiple vectors in H.248, and the 2 X.509if, 3 SRVLOC, 4 H.245, 5 AIM, and 6 general packet dissectors; and 7 the statistics counter...

CVE-2006-1939: Undefined Security Weakness

Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via 1 an invalid display filter, or the 2 GSM SMS, 3 ASN.1-based, 4 DCERPC NT, 5 PER, 6 RPC, 7 DCERPC, and 8 ASN.1 dissectors...

CVE-2006-1933: Undefined Security Weakness

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service large or infinite loops viarafted packets to the 1 UMA and 2 BER dissectors...

CVE-2006-1938: Undefined Security Weakness

Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via the 1 Sniffer capture or 2 SMB PIPE dissector...

CVE-2006-1987: Undefined Security Weakness

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to 1 multiple SCROLLING attributes with no values, or 2 a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which...