MOAB-17-01-2007: Apple SLP Daemon Service Registration Buffer Overflow Vulnerability

Summary NSL is a protocol independent library which has existed since Mac OS 8.5, it predominately uses Service Location Protocol SLP and AppleTalk for service discovery. The Abstract section of RFC-2608 Service Location Protocol, Version 2 has the following definition of SLP: The Service Locatio...

MOAB-17-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Kevin Finisterre All pwnage reserved. Proof of concept for MOAB-17-01-2007 http://projects.info-pull.com/moab/MOAB-17-01-2007.html Originally reported to Apple by Kevin, on 08/02/2006. require 'socket' targetpath = ARGV0 || '/var/run/slpipc' slpsocke...

Buffer overflow

Buffer overflow in the Apple Minimal SLP v2 Service Agent slpd in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field...

CVE-2007-0355

Buffer overflow in the Apple Minimal SLP v2 Service Agent slpd in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field...

CVE-2007-0355

Buffer overflow in the Apple Minimal SLP v2 Service Agent slpd in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field...

CVE-2007-0355

CVE-2007-0355 describes a buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) on Mac OS X, affecting 10.4.11 and earlier (including 10.4.8). The overflow occurs during parsing of a registration request with an invalid attr-list field. Reported impact states potential local privilege ...

Mac OS X 10.4.8 SLP Daemon Service Registration Buffer Overflow PoC

No description provided by source. !/usr/bin/ruby c Copyright 2006 Lance M. Havok lmh at info-pull.com Kevin Finisterre kflists at digitalmunition.com All pwnage reserved. Proof of concept for MOAB-17-01-2007 http://projects.info-pull.com/moab/MOAB-17-01-2007.html...

Apple Mac OSX 10.4.8 - SLP Daemon Service Registration Buffer Overflow (PoC)

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Kevin Finisterre All pwnage reserved. Proof of concept for MOAB-17-01-2007 http://projects.info-pull.com/moab/MOAB-17-01-2007.html Originally reported to Apple by Kevin, on 08/02/2006. require 'socket' targetpath = ARGV0 || '/var/run/slpipc' slpsocke...

Apple Mac OSX 10.4.8 - SLP Daemon Service Registration Buffer Overflow (PoC)

Apple Mac OSX 10.4.8 - SLP Daemon Service Registration Buffer Overflow PoC !/usr/bin/ruby c Copyright 2006 Lance M. Havok Kevin Finisterre All pwnage reserved. Proof of concept for MOAB-17-01-2007 http://projects.info-pull.com/moab/MOAB-17-01-2007.html Originally reported to Apple by Kevin, on...

Mac OS X 10.4.8 SLP Daemon Service Registration Buffer Overflow PoC

Exploit for macOS platform in category dos / poc =================================================================== Mac OS X 10.4.8 SLP Daemon Service Registration Buffer Overflow PoC =================================================================== !/usr/bin/ruby c Copyright 2006 Lance M. Hav...

SLP Server Detection (TCP)

The remote server understands Service Location Protocol SLP, a protocol that allows network applications to discover the existence, location, and configuration of various services in an enterprise network environment. A server that understands SLP can either be a service agent SA, which knows the...

HP-UX PHNE_33508 : HP-UX running SLP, Remote Unauthorized Access (HPSBUX02129 SSRT061149 rev.2)

s700800 11.23 slpd1M patch : A potential security vulnerability has been identified in HP-UX when running Service Locator Protocol SLP.The vulnerability could be exploited by a remote user of Service Locator Protocol SLP for unauthorized access. References: SUSE-SA:2005:015. %NASLMINLEVEL 70300 C...

[security bulletin] HPSBUX02129 SSRT061149 rev.1 - HP-UX running SLP, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00717872 Version: 1 HPSBUX02129 SSRT061149 rev.1 - HP-UX running SLP, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Releas...

Ubuntu 4.10 / 5.04 : gaim vulnerabilities (USN-125-1)

Marco Alvarez found a Denial of Service vulnerability in the Jabber protocol handler. A remote attacker could exploit this to crash Gaim by sending specially crafted file transfers to the user. CAN-2005-0967 Stu Tomlinson discovered an insufficient bounds checking flaw in the URL parser. By sendi...

GLSA-200505-09 : Gaim: Denial of Service and buffer overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200505-09 Gaim: Denial of Service and buffer overflow vulnerabilities Stu Tomlinson discovered that Gaim is vulnerable to a remote stack based buffer overflow when receiving messages in certain protocols, like Jabber and SILC, wit...

gaim -- MSN remote DoS vulnerability

The GAIM team reports: Potential remote denial of service bug resulting from not checking a pointer for non-NULL before passing it to strncmp, which results in a crash. This can be triggered by a remote client sending an SLP message with an empty body...

CVE-2005-0769

Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets...

CVE-2005-0769

Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets...

CVE-2005-0769

Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets...

Gaim: Multiple vulnerabilities

Background Gaim is a full featured instant messaging client which handls a variety of instant messaging protocols. Description A possible buffer overflow exists in the code processing MSN SLP messages CAN-2004-0891. memcpy was used without validating the size of the buffer, and an incorrect buffe...