13 matches found
org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames
A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use of Carriage Return Line Feed CRLF sequences. This occurs because security-related configuration attributes were silently renamed, impacting users who directly configure Rfc5424Layout with stream-bas...
Enterasys NetSight nssyslogd.exe Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Enterasys NetSight nssyslogd.exe Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Enterasys NetSight nssyslogd.exe Buff...
Enterasys NetSight nssyslogd.exe Buffer Overflow Vulnerability
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Enterasys NetSight nssyslogd.exe Buffer Overflow
This module exploits a stack buffer overflow in Enterasys NetSight. The vulnerability exists in the Syslog service nssylogd.exe when parsing a specially crafted PRIO from a syslog message. The module has been tested successfully on Enterasys NetSight 4.0.1.34 over Windows XP SP3 and Windows 2003...
CVE-2011-5227
Stack-based buffer overflow in the Syslog service nssyslogd.exe in Enterasys Network Management Suite NMS before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514...
Stack overflow
Stack-based buffer overflow in the Syslog service nssyslogd.exe in Enterasys Network Management Suite NMS before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514...
CVE-2011-5227
Enterasys NetSight (NMS) Syslog service nssyslogd.exe has a stack-based buffer overflow vulnerability exploitable via a crafted PRIO field in UDP traffic to port 514, affecting versions before 4.1.0.80 and allowing remote code execution. Public references and PoC/exploit modules (e.g., Metasploit...
CVE-2011-5227
Stack-based buffer overflow in the Syslog service nssyslogd.exe in Enterasys Network Management Suite NMS before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514...
eIQnetworks Enterprise Security Analyzer Syslog Server Detection (deprecated)
Plugin has been deprecated as the software is EOL and no longer obtainable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid22126; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...
eIQnetworks Enterprise Security Analyzer Syslog Server Multiple Remote Overflows (deprecated)
Plugin has been deprecated as the software is EOL and no longer obtainable C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22127; scriptversion"1.22"; scriptcveid"CVE-2006-3838"; scriptbugtraqid19165, 19167; scriptxrefname:"Secunia", value:"21211";...
eIQnetworks ESA (Syslog Server) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom - 03/23/2006 Bug found by KF of digitalmunition.com. http://www.zerodayinitiative.com/advisories/ZDI-06-023.html Exploit for Syslog Server by eiQnetworks OEM for Severa...
Check Point FireWall-1/VPN-1 Syslog Daemon Remote Overflow DoS
The remote host is running a syslog server most likely a Check Point NG syslog server with a denial of service vulnerability. A remote, attacker could exploit this to crash this server. It is not known whether or not this vulnerability could result in arbitrary code execution. Please note Nessus...