7687 matches found
wsdd-discover NSE Script
Retrieves and displays information from devices supporting the Web Services Dynamic Discovery WS-Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. Script Arguments max-newtargets, newtargets See the documentation for t...
linux/ARM - Bind Connect UDP Port 68 Shellcode
Exploit for linux/x86 platform in category shellcode ============================================== linux/ARM - Bind Connect UDP Port 68 Shellcode ============================================== / Title: arm-bind-connect-udp Brief: Bind to port 68 on any local address and plug a udp shell onto to...
ARM Bind Connect UDP Port 68
ARM Bind Connect UDP Port 68. Shellcode exploit for arm platform / Title: arm-bind-connect-udp Brief: Bind to port 68 on any local address and plug a udp shell onto to port 67 on 192.168.0.1 Author: Daniel Godas-Lopez / .if 1 / close3, close4, ..., close1024 / mov %r1, $1024 1: mov %r0, %r1 svc...
IBM Tivoli Storage Manager FastBack Mount Service Code Execution
Added: 10/18/2010 CVE: CVE-2010-3058 BID: 42549 OSVDB: 67292 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. TSM includes FastBack, which provides a client/server backup solution for the MS Windows environment. FastBack...
IBM Tivoli Storage Manager FastBack Mount Service Code Execution
Added: 10/18/2010 CVE: CVE-2010-3058 BID: 42549 OSVDB: 67292 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. TSM includes FastBack, which provides a client/server backup solution for the MS Windows environment. FastBack...
IBM Tivoli Storage Manager FastBack Mount Service Code Execution (CVE-2010-3058)
The IBM Tivoli Storage Manager TSM is a product used for storing backups and archiving data. A remote code execution vulnerability has been reported in IBM Tivoli Storage Manager FastBack. The vulnerability is due to an arbitrary memory accessing in Fastback Mount Service FastBackMount.exe which...
Code injection
FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE:...
CVE-2010-3759
CVE-2010-3759 affects IBM Tivoli Storage Manager FastBack Mount (FastBackMount.exe) in the Mount service. Versions affected: FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1. Issue: memory corruption caused by parsing crafted UDP requests to the mount service, enabling remote code execution. Public e...
IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Fastback. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Mount service FastBackMount.exe. This process listens by defau...
Cisco WRV210 null pointer dereference
Exploit for windows platform in category dos / poc ===================================== Cisco WRV210 null pointer dereference ===================================== / 2010-09-24 by Paolo j5r9pn3lka yahoo dot com Product: Cisco WRV210 Wireless-G VPN Router - RangeBooster Type: denial of service...
CVE-2010-2834
Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15SU1, 7.x before 7.15, and 8.0 before 8.02 allow remote attackers to cause a denial of service device reload or...
CVE-2010-2831
Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...
Code injection
Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15SU1, 7.x before 7.15, and 8.0 before 8.02 allow remote attackers to cause a denial of service device reload or...
Code injection
Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...
CVE-2010-2831
Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...
CVE-2010-2834
CVE-2010-2834 affects Cisco IOS/IOS XE and CUCM. A crafted SIP registration over UDP can crash the device, causing a reload or voice-services outage. Affected: IOS 12.2–12.4, 15.0–15.1; IOS XE 2.5.x–2.6.x before 2.6.1; CUCM 6.x before 6.1(5)SU1, 7.x before 7.1(5), 8.0 before 8.0(2). Root cause: p...
CVE-2010-2834
Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15SU1, 7.x before 7.15, and 8.0 before 8.02 allow remote attackers to cause a denial of service device reload or...
CVE-2010-2831
CVE-2010-2831 concerns Cisco IOS NAT for SIP DoS vulnerability. The NAT for SIP feature on Cisco IOS 12.1–12.4 and 15.0–15.1 can cause a device reload (DoS) when processing transit UDP SIP traffic on port 5060 (Bug CSCtf17624). Documents in the Cisco advisory indicate separate NAT DoS issues for ...
ISS - 'PAM.dll' ICQ Parser Buffer Overflow (Metasploit)
$Id: blackicepamicq.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...
Racer 0.5.3 Beta 5 - Remote Buffer Overflow (Metasploit)
$Id: racer503beta5.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...