Sentinel License Manager lservnt Service Remote Buffer Overflow

The remote host is running a version of Sentinel License Manager that is subject to remote buffer overflows. By sending 3000 bytes or more to the UDP port on which it listens 5093 by default, a remote attacker can crash the LServnt.exe service, overwrite the EIP register, and possibly execute...

Sentinel LM 7.x UDP License Service Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== Sentinel LM 7.x UDP License Service Remote Buffer Overflow Exploit ================================================================== / SentinelLM, UDP License Service Stack...

Sentinel LM 7.x UDP License Service Remote Buffer Overflow Exploit

No description provided by source. / SentinelLM, UDP License Service Stack Overflow Homepage: safenet-inc.com Affected version: 7. Patched version: 8.0 Link: safenet-inc.com/products/sentinel/lm.asp Date: 09 March 2005 Advisory: securitytracker.com/alerts/2005/Mar/1013385.html Application Risk:...

Sentinel LM 7.x - UDP License Service Remote Buffer Overflow

Sentinel LM 7.x - UDP License Service Remote Buffer Overflow / SentinelLM, UDP License Service Stack Overflow Homepage: safenet-inc.com Affected version: 7. Patched version: 8.0 Link: safenet-inc.com/products/sentinel/lm.asp Date: 09 March 2005 Advisory:...

Sentinel LM 7.x - UDP License Service Remote Buffer Overflow

/ SentinelLM, UDP License Service Stack Overflow Homepage: safenet-inc.com Affected version: 7. Patched version: 8.0 Link: safenet-inc.com/products/sentinel/lm.asp Date: 09 March 2005 Advisory: securitytracker.com/alerts/2005/Mar/1013385.html Application Risk: High Internet Risk: Medium UDP...

Ethereal <= 0.10.9 "3G-A11" Remote Buffer Overflow Exploit (2)

Exploit for multiple platform in category dos / poc ========================================================== Ethereal LSS Security / include include include include include include include main int argc, char argv int sock; struct sockaddrin sin; unsigned char buf1024; char bla200;...

racoon -- remote denial-of-service

Sebastian Krahmer discovered that the racoon ISAKMP daemon could be crashed with a maliciously crafted UDP packet. No authentication is required in order to perform the attack...

CVE-2005-0353

Buffer overflow in the Sentinel LM Lservnt service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093...

CVE-2005-0353: Undefined Security Weakness

Buffer overflow in the Sentinel LM Lservnt service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093...

SentinelLM UDP Buffer Overflow

This module exploits a simple stack buffer overflow in the Sentinel License Manager. The SentinelLM service is installed with a wide selection of products and seems particular popular with academic products. If the wrong target value is selected, the service will crash and not restart. Module...

Computer Associates License Client GETCONFIG Overflow

This module exploits a vulnerability in the CA License Client service. This exploit will only work if your IP address can be resolved from the target system point of view. This can be accomplished on a local network by running the 'nmbd' service that comes with Samba. If you are running this...

CVE-2004-1650

The CVE covers the D-Link DCS-900 Internet Camera. The device listens on UDP port 62976 for an IP address, enabling remote attackers to change the camera’s IP address via a UDP broadcast packet. Impact is partial confidentiality/integrity/availability (per CVSS), with network-based access and no ...

CVE-2004-1650

D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the IP address of the camera via a UDP broadcast packet...

CVE-2004-1650: Undefined Security Weakness

D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the IP address of the camera via a UDP broadcast packet...

CVE-2004-1524

Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service game interruption via a malformed UDP packet sent to a game port, such as port 29200...

CVE-2004-1524

CVE-2004-1524 affects Hired Team: Trial 2.0 and earlier and 2.200. The issue is triggered by a malformed UDP packet sent to a game port (e.g., 29200), causing a denial of service (game interruption). The framed information in the connected records confirms the affected software and the network-ba...

CVE-2004-1524: Undefined Security Weakness

Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service game interruption via a malformed UDP packet sent to a game port, such as port 29200...

CVE-2005-0426

Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service panic via "Heavy UDP Usage" that triggers a NULL dereference...

CVE-2005-0426: Undefined Security Weakness

Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service panic via "Heavy UDP Usage" that triggers a NULL dereference...

Re: BrightStor ARCserve Backup buffer overflow PoC

Is this for the same flaw detailed at the URL below? The iDefense bug seems to be in the UDP service, but this affects the TCP service... http://www.idefense.com/application/poi/display?id=194&type=vulnerabilities We just posted an exploit for the UDP overflow thanks Syscall to the metasploit.com...