IBM Informix IDS 'librpc.dll'伪造漏洞

IBM Informix Dynamic Server是一款数据库服务程序。 默认监听UDP 111端口的librpc.dll组件存在缺陷，当处理pmapset请求时，进程会校验源地址是否为"127.0.0.1"。此通信通过UDP，无需合法源地址。创建源地址为"127.0.0.1"的UDP报文给此服务，允许远程攻击者注册或注销RPC服务，远程攻击者可以利用此漏洞进行拒绝服务条件或窃听进程通信。 Bugtraq ID: 47875 CVE ID：CVE-2011-1210 IBM Informix IDS 11.70 IBM Informix IDS 11.50.xC8 IBM...

EMC NetWorker address spoofing

librpc.dll library accepts RPC commands in UDP packets with spoofed IPs...

Multiple Vendor librpc.dll Remote Information Disclosure Vulnerability

This vulnerability allows remote attackers to register RPC services on vulnerable installations of EMC Legato Networker and IBM Informix Dynamic Server. Authentication is not required to exploit this vulnerability. The flaw exists within the librpc.dll component which listens by default on UDP po...

backorifice-brute NSE Script

Performs brute force password auditing against the BackOrifice service. The backorifice-brute.ports script argument is mandatory it specifies ports to run the script against. Script Arguments backorifice-brute.ports mandatory List of UDP ports to run the script against separated with "," ex...

ZDI-11-161: HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability

ZDI-11-161: HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-161 May 10, 2011 -- CVE ID: CVE-2011-1849 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

ZDI-11-164: HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability

ZDI-11-164: HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-164 May 10, 2011 -- CVE ID: CVE-2011-1852 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected...

ZDI-11-162: HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability

ZDI-11-162: HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-162 May 10, 2011 -- CVE ID: CVE-2011-1850 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When...

HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the dbman.exe component which listens by default on UDP port 2810. Wh...

HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 51...

HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...

HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...

Cisco IOS UDP flood DoS

UDP packets flooding leads to CPU exhaustion...

Cisco IOS UDP Denial of Service Vulnerability

Cisco IOS UDP Denial of Service Vulnerability ------------------------------------------------------------------ I. Summary Cisco routers running IOS 15.0 allows a remote attacker to cause a denial of service via a flood of UDP packets a randomly chosen UDP port...

broadcast-avahi-dos NSE Script

Attempts to discover hosts in the local network using the DNS Service Discovery protocol and sends a NULL UDP packet to each host to test if it is vulnerable to the Avahi NULL UDP packet denial of service CVE-2011-1002. The broadcast-avahi-dos.wait script argument specifies how many number of...

Squid WCCP Message Receive Buffer Overflow (CVE-2005-0211)

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. An attacker can exploit this vulnerability to terminate the vulnerable product, creating a denial of service condition, or it can be exploited for code. A remote vulnerability was found in Squid web proxy/cache processes...

[SECURITY] [DSA 2225-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2225-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 25, 2011 http://www.debian.org/security/faq -...

Nortel CS1000 Communications Server Remote Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of Nortel CS1000 Communication Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the process listening on UDP port 5100. When parsing ...

THC-Amap v5.3 - application protocol detection Released , Download Now !

THC-Amap v5.3 - application protocol detection Released , Download Now ! Amap was innovative - the first tool to perform application protocol detection. Then a better approach was implemented into nmap, this and the large user base of nmap made amap pretty much obsolete. So today, I recommend to...

avahi security update

CentOS Errata and Security Advisory CESA-2011:0436 Updated avahi packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base scor...