CVE-2006-5391

Xfire 1.64 and earlier allows remote attackers to cause a denial of service client application crash via a long string to UDP port 25777...

CVE-2006-5391

Xfire 1.64 and earlier is affected by CVE-2006-5391. An attacker can remotely cause a denial of service by sending a long string to UDP port 25777, triggering a client application crash. The available documents state the vulnerability and impact but do not provide details on root cause beyond the...

Syslog PRIORITY Field Enforcement

Syslog is a standard for transporting event notification messages over IP networks to event message collectors, or Syslog servers. Syslog is often used for system management and security auditing. Syslog servers, by default, listen on UDP port 514.Also, it is possible to have event message relays...

CVE-2006-5391: Undefined Security Weakness

Xfire 1.64 and earlier allows remote attackers to cause a denial of service client application crash via a long string to UDP port 25777...

Xfire 1.6.4 - Remote Denial of Service

!/usr/bin/perl Moderator of http://igniteds.net X fire version:new Release 1.64 Vendors web site http://www.xfire.com/ remote exploit coded by: n00b.. Credit's to n00b for finding this bug.. Xfire client has a dos exploit closing the client upon success full exploitation xfire will fail..Ive...

CVE-2006-5231: Undefined Security Weakness

Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service hang or reboot via a large amount of ASCII data sent to port 1 5060/UDP, 2 5062/UDP, 3 5064/UDP, 4 5066/UDP, 5 9876/UDP, or 6 26789/UDP...

CA BrightStor ARCserve Discovery Service Remote Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup, Enterprise Backup, Server Protection Suite and Business Protection Suite. Authentication is not required to exploit this vulnerability and both clien...

Multiple VoIP phones vulnerabilities

Buffer overflows in integrated HTTP server. Buffer overflow on large UDP datagrams...

[Full-disclosure] (0-Day) GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS

Title: GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS Version: 1.1.0.5 Issues: 1.The phone has multiple undocumented open UDP ports, including 5062, 5064, 5066, 9876, 26789 2.Sending large amount of ascii data via NetCat to any open UDP port, including UDP/5060,...

TFTPDWIN v0.4.2 Long Filename Buffer Overflow

This module exploits the ProSysInfo TFTPDWIN threaded TFTP Server. By sending an overly long file name to the tftpd.exe server, the stack can be overwritten. Module Options msf use exploit/windows/tftp/tftpdwin/longfilename msf undefinedlongfilename show actions ...actions... msf...

CVE-2006-4781

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...

CVE-2006-4781: Undefined Security Weakness

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...

GLSA-200608-23 : Heartbeat: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200608-23 Heartbeat: Denial of Service Yan Rong Ge discovered that the peelnetstring function in clnetstring.c does not validate the 'length' parameter of user input, which can lead to an out-of-bounds memory access when processin...

CVE-2006-4194

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

CVE-2006-4194

CVE-2006-4032 (Cisco IOS CME) and CVE-2006-4194 involve an unspecified vulnerability in Cisco products (CME and PIX 500) where remote attackers can access sensitive information (e.g., SIP user directory usernames) through SIP-related messages or fixups. The description notes the vendor could not ...

CVE-2006-4194

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

CVE-2006-4194: Undefined Security Weakness

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

UDP the Trojan trek-vulnerability warning-the black bar safety net

| Current in the network upstream of the blow-by modus the Trojans are usually use the TCP port for remote control, but this Trojan for a bit of network security awareness of friends is very easy to be found. Cunning intruders in the face of this situation, developed using UDP port of the Trojan,...

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...