CVE-2010-4227

The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service abend or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow...

CVE-2011-0389

Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service process crash via a crafted Real-Time Transport Control Protocol RTCP UDP packet, aka Bug ID CSCth60993...

Code injection

Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service process crash via a crafted Real-Time Transport Control Protocol RTCP UDP packet, aka Bug ID CSCth60993...

CVE-2011-0389

CVE-2011-0389 is a vulnerability in Cisco TelePresence Multipoint Switch (CTMS) devices affecting software 1.0.x, 1.1.x, 1.5.x and 1.6.x. A remote, unauthenticated attacker can crash the call control process by sending a crafted RTCP UDP packet, causing a denial of service. The Cisco advisory and...

Mandriva Linux Security Advisory : avahi (MDVSA-2011:037)

A vulnerability has been found and corrected in avahi : avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service infinite loop via an empty 1 IPv4 or 2 IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix...

Novell Netware RPC XNFS xdrDecodeString Vulnerability

Exploit for linux platform in category dos / poc !/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= "\x1c\xd1\xef\xab" + XID "\x00\x00\x00\x00" + Message Type:...

Novell Netware - RPC XNFS xdrDecodeString

Novell Netware - RPC XNFS xdrDecodeString !/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= "\x1c\xd1\xef\xab" + XID "\x00\x00\x00\x00" + Message Type: Call 0...

Novell Netware RPC XNFS xdrDecodeString Code Execution

!/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= "\x1c\xd1\xef\xab" + XID "\x00\x00\x00\x00" + Message Type: Call 0 "\x00\x00\x00\x02" + RPC Version: 2...

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-090 February 18, 2011 -- CVE ID: CVE-2010-4227 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Netware --...

Novell Netware - RPC XNFS xdrDecodeString

!/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= "\x1c\xd1\xef\xab" + XID "\x00\x00\x00\x00" + Message Type: Call 0 "\x00\x00\x00\x02" + RPC Version: 2...

Novell Netware integer overflow

Integer overflow on XNFS UDP/1234 processing...

CVE-2011-1002

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service infinite loop via an empty mDNS 1 IPv4 or 2 IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244...

CVE-2011-1002

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service infinite loop via an empty mDNS 1 IPv4 or 2 IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244...

PT-2011-1132

Name of the Vulnerable Software and Affected Versions avahi versions prior to 0.6.29 avahi-glib versions 0.6.16 avahi-glib-devel versions 0.6.16 avahi-compat-howl versions 0.6.16 avahi-compat-howl-devel versions 0.6.16 avahi-qt3 versions 0.6.16 avahi-qt3-devel versions 0.6.16 avahi-devel versions...

CVE-2011-1002

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service infinite loop via an empty mDNS 1 IPv4 or 2 IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244...

ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability

ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-089 February 17, 2011 -- CVE ID: CVE-2010-4323 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Zenworks -- TippingPointTM IPS...

avahi -- denial of service

Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error when processing certain UDP packets, which can be exploited to trigger an infinite loop by e.g. sending an...

Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the XNFS.NLM component which listens by default on UDP port 1234. When handling the an NFS RPC...

Novell ZenWorks TFTPD Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Zenworks Configuration Manager. Authentication is not required to exploit this vulnerability. The flaw exists within the novell-tftp.exe component which listens by default on UDP port 69. Wh...

R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities

R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities February 7, 2011 -- Vulnerability Details: The Accellion File Transfer Appliance, prior to version FTA80562, suffers from a number of security flaws that can lead to a remote root compromise. 1. Message Routing Daemon Default...