Cable Modem Termination System Authentication Bypass - Cisco Systems

Two issues are described in this security advisory. The first issue involves cable modems not manufactured by Cisco that allow a configuration file to be downloaded from an interface that is not connected to the network of the cable modem's service provider. This historical behavior allows an...

Debian DSA-2101-1 : wireshark - several vulnerabilities

Several implementation errors in the dissector of the Wireshark network traffic analyzer for the ASN.1 BER protocol and in the SigComp Universal Decompressor Virtual Machine may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Splunk Management API Detection

The remote web server is an instance of the Splunk management API. Splunk is a search, monitoring, and reporting tool for system administrators. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49069; scriptversion"1.16";...

NetTransport Download Manager 2.90.510 - Remote Buffer Overflow (Metasploit)

$Id: nettransport.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

A-PDF WAV to MP3 v1.0.0 Buffer Overflow

$Id: a-pdfwavtomp3.rb 10107 2010-08-23 16:58:42Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit

Exploit for windows platform in category local exploits =================================================== A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit =================================================== !/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloi...

A-PDF WAV to MP3 1.0.0 - Universal Local (SEH)

A-PDF WAV to MP3 1.0.0 - Universal Local SEH !/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloit By: DrIDE Tested On: XPSP3 Date: August 18, 2010 Download: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Reference:...

A-PDF WAV To MP3 1.0.0 Universal Local SEH Exploit

!/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloit By: DrIDE Tested On: XPSP3 Date: August 18, 2010 Download: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Reference: http://www.exploit-db.com/exploits/14676/ Usage: Import File, Select It,...

kernel: information leak via userspace USB interface

The processcomplcompat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensiti...

MUSE 4.9.0.006 .pls Buffer Overflow

Exploit Title: MUSE v4.9.0.006 .pls Local Universal Buffer Overflow SEH Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/MUSE/3000-21404-42511.html Version: 4.9.0.006 Tested on: Windows XP SP3 En payload = "\x41" 1376 payload +=...

Triologic Media Player 8 Universal Unicode Buffer Overflow

Exploit Title: Triologic Media Player 8 .m3u Local Universal Unicode Buffer Overflow SEH Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/Triologic-Media-Player/3000-21394-10691520.html Version: 8 Tested on: Windows XP SP3 En...

MUSE 4.9.0.006 - '.pls' Universal Local Buffer Overflow (SEH)

Exploit Title: MUSE v4.9.0.006 .pls Local Universal Buffer Overflow SEH Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/MUSE/3000-21404-42511.html Version: 4.9.0.006 Tested on: Windows XP SP3 En payload = "\x41" 1376 payload +=...

CVE-2010-2995

The SigComp Universal Decompressor Virtual Machine UDVM in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer...

DEBIAN-CVE-2010-2995

The SigComp Universal Decompressor Virtual Machine UDVM in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer...

Mediacoder 0.7.5.4710 - Universal Local Buffer Overflow (SEH)

Mediacoder 0.7.5.4710 - Universal Local Buffer Overflow SEH !/usr/bin/env python Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit Coded By: DrIDE Found By: abhishek lyall Usage: Load the evil .m3u file and click on it. Tested On: Windows XPSP3 windows/exec - 534 bytes...

wireshark: SigComp UDVM dissector buffer overruns

Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors...

wireshark: SigComp UDVM dissector infinite loop

The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

wireshark: SigComp UDVM dissector buffer overruns

The SigComp Universal Decompressor Virtual Machine UDVM in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer...

CVE-2010-2536

Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...

CVE-2009-4975

Cross-site scripting XSS vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...