MPlayer Stack Buffer Overflow

!/usr/bin/perl MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC PoC by Amirreza Aminsalehi "sCORPINo" Proud To be an Abay scorpino x40 gmail x2e com Snoop Security Researching Committee www.snoop-security.com Originaly this bug discovered by Tobias Klein advisory @...

MPlayer 1.0rc2 - TwinVQ Stack Buffer Overflow (PoC)

!/usr/bin/perl MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC PoC by Amirreza Aminsalehi "sCORPINo" Proud To be an Abay scorpino x40 gmail x2e com Snoop Security Researching Committee www.snoop-security.com Originaly this bug discovered by Tobias Klein advisory @...

MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC

Exploit for multiple platform in category dos / poc =============================================== MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC =============================================== !/usr/bin/perl MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC PoC by Amirreza Aminsalehi "sCORPINo"...

DNS Server Dynamic Update Record Injection

It was possible to add a record into a zone using the DNS dynamic update protocol, as described by RFC 2136. This protocol can be used by DHCP clients to enter their host names into the DNS maps, but it could be subverted by malicious users to redirect network traffic. C Tenable Network Security,...

[SECURITY] Fedora 8 Update: bluez-utils-3.35-3.fc8

Bluetooth utilities bluez-utils: - hcitool - hciattach - hciconfig - hcid - l2ping - start scripts Red Hat - pcmcia configuration files The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

[SECURITY] Fedora 8 Update: bluez-libs-3.35-1.fc8

Libraries for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

FreeBSD Security Advisory (FreeBSD-SA-06:20.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:20.bind.asc ADV FreeBSD-SA-06:20.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Unfixed XSS vulnerability at www.browning.com

Security researcher SnS, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.browning.com, which at the time of submission ranked 120621 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is currently...

Debian Security Advisory DSA 1172-1 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 1172-1. Two vulnerabilities have been discovered in BIND9, the Berkeley Internet Name Domain server. The first relates to SIG query processing and the second relates to a condition that can trigger an INSIST failure, both le...

Debian: Security Advisory (DSA-1172-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6156

Multiple cross-site scripting XSS vulnerabilities in baseqrymain.php in Base Analysis and Security Engine BASE before 1.3.9 allow remote attackers to inject arbitrary web script or HTML via the 1 sig0 and 2 sig1 parameters...

CVE-2007-6156

BASE/Base Analysis and Security Engine (BASE) before 1.3.9 contains cross-site scripting in base_qry_main.php, exploitable via sig[0] and sig[1] parameters. This affects BASE 1.3.8 and earlier releases per CVE-2007-6156. Impact: remote attackers can inject arbitrary web script/HTML. Mitigation: u...

HP-UX Security Patch : PHKL_24753

sig,thd,spinlock,sched,IDS,q3p,prntf,FSS,slp %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26351; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

FreeBSD : bind9 -- Denial of Service in named(8) (ef3306fc-8f9b-11db-ab33-000e0c2e438a)

Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...

ISC BIND多个拒绝服务漏洞

BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominumwww.nominum.com公司来完成。 ISC BIND的实现上存在多个拒绝服务漏洞，远程攻击者可能利用此漏洞导致BIND拒绝服务。 BIND在处理SIG查询时存在断言错误。如果返回了多于一个的SIGcovered RRset的话，就会导致递归服务器崩溃；或者对于权威服务器，如果名称服务器服务于RFC 2535 DNSSEC区且被查询了有多个SIGcovered RRset的SIG记录（如zone apex），则在创建响应的时候也会触发类似的错误。...

BIND: Denial of service

Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description Queries for SIG records will cause an assertion error if more than one SIG RRset is returned. Additionally, an INSIST failure can be triggered by sending multiple recursive...

GLSA-200609-11 : BIND: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200609-11 BIND: Denial of Service Queries for SIG records will cause an assertion error if more than one SIG RRset is returned. Additionally, an INSIST failure can be triggered by sending multiple recursive queries if the response...

[SECURITY] [DSA 1172-1] New bind9 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1172-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2006 http://www.debian.org/security/faq -...

CVE-2006-4095

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service crash via certain SIG queries, which cause an assertion failure when multiple RRsets are returned...

CVE-2006-4095

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service crash via certain SIG queries, which cause an assertion failure when multiple RRsets are returned...