CVE-2006-0340: Improper Input Validation

Unspecified vulnerability in Stack Group Bidding Protocol SGBP support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service device hang and network traffic loss via a crafted UDP packet to...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Information disclosure

ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 allows remote attackers to obtain sensitive information, such as MAC address and software version, by directly accessing UDP port 9090...

CVE-2006-0302

ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 allows remote attackers to obtain sensitive information, such as MAC address and software version, by directly accessing UDP port 9090...

CVE-2006-0302

ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 allows remote attackers to obtain sensitive information, such as MAC address and software version, by directly accessing UDP port 9090...

Cisco IOS MMP Stack Group Bidding Protocol (SGBP) Crafted UDP Packet Remote DoS (CSCsb11124)

The remote host is a CISCO router containing a version of IOS which is prone to a denial of service vulnerability. An attacker may exploit this flaw to crash the remote device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid20744; scriptversion"1.19";...

CA DM Deployment Common Component Multiple DoS

The remote version of DMPrimer service CA DM Deployment Common Component is vulnerable to multiple Denial of Service attacks. An attacker can crash or may cause a high CPU utilization by sending a specially crafted UDP packets. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

CVE-2006-0302: Undefined Security Weakness

ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 allows remote attackers to obtain sensitive information, such as MAC address and software version, by directly accessing UDP port 9090...

TFTPD32 2.81 - GET Format String Denial of Service (PoC)

TFTPD32 2.81 - GET Format String Denial of Service PoC !/usr/bin/perl Tftpd32 Format String PoC DoS by Critical Security research http://www.critical.lt use IO::Socket; $port = "69"; $host = "127.0.0.1"; $tftpudp = IO::Socket::INET-newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $bzz =...

CVE-2006-0250

CVE-2006-0250 affects the CMU SNMP utilities (cmu-snmp), specifically the snmptrapd component’s snmp_input function. The root cause is a format string vulnerability that enables remote code execution by sending crafted SNMP messages to UDP port 162. Several connected sources confirm the vulnerabl...

Format string

Format string vulnerability in the snmpinput function in snmptrapd in CMU SNMP utilities cmu-snmp allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162...

CVE-2006-0250: Undefined Security Weakness

Format string vulnerability in the snmpinput function in snmptrapd in CMU SNMP utilities cmu-snmp allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162...

[Full-disclosure] ZyXel P2000W (Version 2) VoIP wireless phone undocumented port UDP/9090

I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR NOTIFIED: 7 December, 2005 VENDOR: Zyxel PRODUCT:...

Computer Associates Unicenter 6.0 - Remote Control DM Primer Remote Denial of Service

Computer Associates Unicenter 6.0 - Remote Control DM Primer Remote Denial of Service source: https://www.securityfocus.com/bid/16276/info Computer Associates Unicenter Remote Control DM Primer is prone to a denial-of-service vulnerability. Attackers may trigger a denial of service due to a hang...

[Full-disclosure] Senao SI-7800H VoIP wireless phone wdbrpc debug service UDP/17185

I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR: Senao VENDOR NOTIFIED: 7 December, 2005 PRODUCT:...

[Full-disclosure] MPM HP-180W VoIP wireless desktop phone undocumented port UDP/9090

I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR: MPM - http://www.mpn.com.tw VENDOR NOTIFIED: 7...

Computer Associates Unicenter 6.0 - Remote Control DM Primer Remote Denial of Service

source: https://www.securityfocus.com/bid/16276/info Computer Associates Unicenter Remote Control DM Primer is prone to a denial-of-service vulnerability. Attackers may trigger a denial of service due to a hang. Note that an attacker may easily source IP addresses because the service uses UDP...

Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-38-1)

CAN-2004-0814 : Vitaly V. Bursov discovered a Denial of Service vulnerability in the 'serio' code; opening the same tty device twice and doing some particular operations on it caused a kernel panic and/or a system lockup. Fixing this vulnerability required a change in the Application Binary...

Ubuntu 4.10 : squid vulnerabilities (USN-67-1)

infamous41md discovered several Denial of Service vulnerabilities in squid. A malicious Gopher server could crash squid by sending a line bigger than 4096 bytes. CAN-2005-0094 If squid is configured to send WCPP Web Cache Communication Protocol messages to a 'home router', an attacker who was abl...

Ubuntu 4.10 / 5.04 / 5.10 : ucd-snmp vulnerability (USN-190-2)

USN-190-1 fixed a vulnerability in the net-snmp library. It was discovered that the same problem also affects the ucs-snmp implementation which is used by the Cyrus email server. Original advisory : A remote Denial of Service has been discovered in the SMNP Simple Network Management Protocol...