Fedora 20 : prboom-plus-2.5.1.3-3.fc20 (2013-20940)

-------- prboom-plus-2.5.1.3-3 replaces mktemp with mkstemp to satisfy rpmlint Doom is a classic 3D shoot-em-up game. PrBoom+ is a Doom source port developed from the original PrBoom project by Andrey Budko. The target of the project is to extend the original port with features that are necessary...

tcp(port&seq) backdoor

Автор: slashd Что это? Реализации скрытого канала передачи данных на сервер с помощью стандартных полейв нашем случае поля SEQ и Source Port TCP-заголовка. Теоритическая часть. Реализовать скрытую передачу данных с помощью TCP-заголовка можно несколькими способами. Клиентхакер иницирующий...

Oracle Linux 5 : ruby (ELSA-2008-0897)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0897 advisory. - CVE-2008-3655: multiple insufficient safe mode restrictions. - CVE-2008-3656: WEBrick DoS vulnerability CPU consumption. - CVE-2008-3657: missing...

Oracle Linux 5 : dnsmasq (ELSA-2008-0789)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2008-0789 advisory. - fixes for CVE-2008-1447/CERT VU800113 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

SIP Username Enumerator For Asterisk

require 'msf/core' class Metasploit3 'SIP Username Enumerator for Asterisk UDP Security Advisory AST-2011-013, CVE-2011-4597', 'Version' = '$Revision: 1 $', 'Description' = 'REGISTER scan for numeric peer usernames having a nat setting different to global sip nat setting. ' 'Ben Williams',...

CVE-2011-2760

Brocade BigIron RX switches allow remote attackers to bypass ACL rules by using 179 as the source port of a packet...

CVE-2011-2760

Brocade BigIron RX switches are affected: an attacker could bypass access control lists by crafting a packet with 179 as the source port, enabling remote bypass of ACL rules. The provided sources describe the vulnerability as a source-port-based bypass but do not specify a fixed patch/version or ...

Ubuntu 10.04 LTS : libvirt update (USN-1008-3)

USN-1008-1 fixed vulnerabilities in libvirt. The update for Ubuntu 10.04 LTS reverted a recent bug fix update. This update fixes the problem. We apologize for the inconvenience. It was discovered that libvirt would probe disk backing stores without consulting the defined format for the disk. A...

Avahi Source Port 0 DoS

Avahi-daemon versions prior to 0.6.24 can be DoS'd with an mDNS packet with a source port of 0. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Avahi Source Port 0 DoS', 'Description' = %q...

Rogue Gateway Detection: Sender

This module send a series of TCP SYN and ICMP ECHO requests to each internal target host, spoofing the source address of an external system running the roguerecv module. This allows the system running the roguerecv module to determine what external IP a given internal system is using as its defau...

LinkLogger 2.4.10.15 - syslog Denial of Service

LinkLogger 2.4.10.15 - syslog Denial of Service !/usr/bin/perl LinkLogger 2.4.10.15 syslog DoS Tested against 2.4.10.15 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: 1. Based on code from http://www.pythonprasanna.com/Papers%20and%20Articles/Sockets/udpspoofpl.txt 2. The exact amount o...

DNS vulnerabilities to attack the Ruby code-vulnerability warning-the black bar safety net

1 require 'msf/core' 2 require 'net/dns' 3 require 'scruby' 4 require 'resolv' 5 6 module Msf 7 8 class Auxiliary::Spoof::Dns::BaliWickedHost Msf::Auxiliary 9 1 0 The include Exploit::Remote::Ip 1 1 1 2 def initializeinfo = 1 3 superupdateinfoinfo, 1 4 'Name' = 'DNS BaliWicked Attack', 1 5...

Mandrake Security Advisory MDVSA-2009:031 (avahi)

The remote host is missing an update to avahi announced via advisory MDVSA-2009:031. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

SuSE Update for bind SUSE-SA:2008:033

Check for the Version of bind OpenVAS Vulnerability Test $Id: gbsuse2008033.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for bind SUSE-SA:2008:033 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

avahi: avahi-daemon DoS (application abort) via packet with source port 0

The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...

GLSA-200901-03 : pdnsd: Denial of Service and cache poisoning

The remote host is affected by the vulnerability described in GLSA-200901-03 pdnsd: Denial of Service and cache poisoning Two issues have been reported in pdnsd: The pexecquery function in src/dnsquery.c does not properly handle many entries in the answer section of a DNS reply, related to a...

Avahi multicast DNS server DoS

assert on UDP packet with SRC port 0...

Avahi 0.6.24 - mDNS Daemon Remote Denial of Service

Avahi 0.6.24 - mDNS Daemon Remote Denial of Service / cve-2008-5081.c Avahi mDNS Daemon Remote DoS http://jon.oberheide.org Usage: gcc cve-2008-5081.c -ldnet -o cve-2008-5081 ./cve-2008-5081 1.2.3.4 Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081 Crafted mDNS packet with...

Avahi < 0.6.24 (mDNS Daemon) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ============================================================= Avahi http://jon.oberheide.org Usage: gcc cve-2008-5081.c -ldnet -o cve-2008-5081 ./cve-2008-5081 1.2.3.4 Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081...

DEBIAN-CVE-2008-5081

The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...