Microsoft Host Integration Server多个拒绝服务漏洞

Bugtraq ID: 47315 Microsoft Host Integration Server是一款主机平台互通解决方案。 -使用TCP协议的如1478端口上的snabase.exe，使用动态端口的snalink.exe，snaservr.exe, mngagent.exe等，"wordpacket - 2"可使应用程序进入无限循环，持续解析相同数据。 -访问最大0x1ee字节报文之后的未分配内存可导致进程崩溃。 -超过0x1ee字节的UDP报文可阻止接收任何其他UDP报文。 -字符串过大可导致异常。 -如果字符串超过0x10字节，服务器会触发异常终止。 Microsoft Ho...

Wireshark 1.5.1 Development Release !

Wireshark 1.5.1 Development Release ! Wireshark 1.5.1 has been released. Installers for Windows, OS X, and source code are now available. New and Updated Features The following features are new or have been significantly updated since version 1.4: 1. Wireshark can import text dumps, similar to...

Microsoft Host Integration Server 8.5.4224.0 - Denial of Service

Source: http://aluigi.org/adv/snabase1-adv.txt Luigi Auriemma Application: Microsoft Host Integration Server http://www.microsoft.com/biztalk/en/us/host-integration.aspx?pf=true Versions: = 8.5.4224.0 Platforms: Windows Bugs: various Denial of Service vulnerabilities Exploitation: remote, versus...

Microsoft Host Integration Server 8.5.4224.0 - Denial of Service

Microsoft Host Integration Server 8.5.4224.0 - Denial of Service Source: http://aluigi.org/adv/snabase1-adv.txt Luigi Auriemma Application: Microsoft Host Integration Server http://www.microsoft.com/biztalk/en/us/host-integration.aspx?pf=true Versions: = 8.5.4224.0 Platforms: Windows Bugs: variou...

Detect RPC over UDP

This service answered to a RPC procedure 0 call. For whatever reason, it was not registered by the portmapper or Nessus could not query to the portmapper e.g. if port 111 is filtered or not scanned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Accellion File Transfer Appliance MPIPE2 Command Execution

$Id: accellionftampipe2.rb 11935 2011-03-11 17:37:23Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Accellion File Transfer Appliance MPIPE2 - Command Execution (Metasploit)

$Id: accellionftampipe2.rb 11935 2011-03-11 17:37:23Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Debian: Security Advisory (DSA-2174-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1316

The Session Initiation Protocol SIP Proxy in the HTTP Transport component in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service worker thread exhaustion and UDP messaging outage by sending many UDP messages...

Session fixation

The Session Initiation Protocol SIP Proxy in the HTTP Transport component in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service worker thread exhaustion and UDP messaging outage by sending many UDP messages...

CVE-2011-1316

CVE-2011-1316 affects IBM WebSphere Application Server (WAS) SIP Proxy in the HTTP Transport, where sending a flood of UDP messages can exhaust worker threads and cause UDP messaging outage, leading to a DoS condition. Vulnerable: WAS versions before 7.0.0.15. Red Hat and OpenVAS entries corrobor...

CVE-2011-1316

The Session Initiation Protocol SIP Proxy in the HTTP Transport component in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service worker thread exhaustion and UDP messaging outage by sending many UDP messages...

USN-1084-1: avahi vulnerability

It was discovered that Avahi incorrectly handled empty UDP packets. A remote attacker could send a specially-crafted packet and cause Avahi to hang, resulting in a denial of service...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

Exploit for windows platform in category remote exploits $Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...

Debian DSA-2174-1 : avahi - denial of service

It was discovered that Avahi, an implementation of the zeroconf protocol, can be crashed remotely by a single UDP packet, which may result in a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Wireshark CLDAP Dissector DOS

This module causes infinite recursion to occur within the CLDAP dissector by sending a specially crafted UDP packet. Module Options msf use auxiliary/dos/wireshark/cldap msf undefinedcldap show actions ...actions... msf undefinedcldap set ACTION msf undefinedcldap show options ...show and set...

Mandriva Update for avahi MDVSA-2011:037 (avahi)

Check for the Version of avahi OpenVAS Vulnerability Test Mandriva Update for avahi MDVSA-2011:037 avahi Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

DSA-2174-1 avahi - denial of service

Bulletin has no description...

Stack overflow

The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service abend or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow...

CVE-2010-4227

The CVE concerns Novell Netware 6.5’s XNFS.NLM (default UDP port 1234). The xdrDecodeString function accepts a signed length and writes NULL terminator, enabling a stack-based buffer overflow that can lead to remote code execution or a denial of service. Published details confirm a remote attacke...