Aircrack is an 802.11 WEP cracking program that can recover a 40-bit or 104-bit WEP key once enough encrypted packets have been gathered. It implements the standard FMS attack along with some optimizations, thus making the attack much faster compared to other WEP cracking tools.
08ce1933ec71141f052a7f77ac681dda21a4003b158b9f4b74133a6526e981faExploit that simulates POP3 server which sends a specially crafted email to a vulnerable Gaucho email client, triggering an overflow and binding a shell on port 2001. Version 1.4 build 145 is susceptible.
c8e97e6293220ffcd697f03cd1b7f766ea7557076534f67514f931b5f9a45e9fGaucho version 1.4 Build 145 is vulnerable to a buffer overflow when receiving malformed emails from a POP3 server. This vulnerability is triggered if Gaucho receives from the POP3 server, a specially crafted email that has an abnormally long string in the Content-Type field of the email header. This string will overwrite EIP via SEH, and can be exploited to execute arbitrary code.
bad2f2ceea309c37340f7b2126c6ee4bfceb4e9ad6e52b92245fda99089f03fcWeplab is a tool to review the security of WEP encryption in wireless networks from an educational point of view. Several attacks are available to help measure the effectiveness and minimum requirements necessary to succeed.
1f65381465078afd9c615334236d77efec14b05790398ba0e229dea8c97e0cd5WifiScanner is an analyzer and detector of 802.11b stations and access points which can listen alternatively on all the 14 channels, write packet information in real time, search access points and associated client stations, and can generate a graphic of the architecture using GraphViz. All network traffic may be saved in the libpcap format for post analysis. It works under Linux with a PrismII card and with the linux-wlan driver.
73e3f236262f4aca005f31b5e7e3545e7fc2dfde57fd26bdd55412c3967175abCisco Security Advisory: Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) provide authentication, authorization, and accounting (AAA) services to network devices such as a network access server, Cisco PIX and a router. This advisory documents multiple Denial of Service (DoS) and authentication related vulnerabilities for the ACS Windows and the ACS Solution Engine servers.
6d030f78d216fb45b19f09f3821fa9cf7f724e6ed2a399b433e61b09fafd0dccExploit that was found in the wild by k-otik.com that makes use of the Winamp vulnerability where insufficient restrictions on Winamp skin zip files (.wsz) allow a malicious attacker to place and execute arbitrary programs on a victim's system.
934ebde8434dd87a7cb361dbd695702d9dcbc47d07cdbc24edc7fa476d234f04RealVNC versions 4.0 and below will crash if more than 60 connections get opened to the server.
4cbd07d2de61806af50567af1cffc65ae403562ad36a20f536da7a1f9217ff35iDEFENSE Security Advisory 08.25.04-2 - Exploitation of a buffer overflow in the libDtHelp library included with CDE can allow local attackers to gain root privileges. The vulnerability specifically exists due to a lack of bounds checking on the LOGNAME environment variable. Local attackers can specify a long LOGNAME to trigger a buffer overflow in any application linked with libDtHelp. The overflow is activated once the help subsystem is accessed by selecting any option under the Help menu.
4e0aced12468daa1bd790fda025e6ae00229c6c766c04cbfdc46ea9ccbd789c1iDEFENSE Security Advisory 08.25.04 - Remote exploitation of a buffer overflow vulnerability in Ipswitch Inc.'s WhatsUp Gold allows attackers to execute arbitrary code under the privileges of the user that instantiated the application. The problem specifically exists in the _maincfgret.cgi script accessible through the web server installed by WhatsUp Gold. By posting a long string for the value of 'instancename', a buffer overflow occurs allowing an attacker to redirect the flow of control and eventually execute arbitrary code. Fixed in version 8.03 Hotfix 1.
0ea91303c6cef00a91d278839e653ac5d8f44462a6f9b9b03560ebc10458660dIRM Security Advisory 010 - A bug exists in the Top Layer Attack Mitigator IPS 5500 software. In versions below 3.11.014, it can cause the IPS 5500 device to incorrectly enter an overload protection mode and negatively impact network traffic. In extreme cases, this can cause a denial of service condition. More than 2,000 concurrent HTTP requests can cause this condition to occur.
5fd5787749f2eb3da4b51617b7ecc4d5d1a285bb60b1a0746a2fcaa7b0f99339Secunia Security Advisory - Sourvivor has reported a vulnerability in Plesk 7.x, which can be exploited by malicious people to conduct cross-site scripting attacks.
4dcd2975870569afa4cadc62d4e5c9f43388c8204eccef813329b8fbf451da5dPoor variable sanitization in Google's GMail system allows users to surf anonymously.
355bf8ddaa8226ffb0284f2b492e6d9f615dda011ccb317322ec9e1376e3f79dSecunia Security Advisory - ISS X-Force has reported a vulnerability in the NSS library included with various Netscape products, which can be exploited by malicious people to compromise a vulnerable system. Affected systems: Netscape Enterprise Server, Netscape Personalization Engine, Netscape Directory Server, Netscape Certificate Management System. Editor's Note: This advisory was posted because ISS refuses to grant Packet Storm permission to add their advisories.
a797eec259e149f15aa9e11995070349552e10f884bb788579738ede2148e430Secunia Security Advisory - ISS X-Force has reported a vulnerability in the NSS library included with Sun Java System Web Server, which can be exploited by malicious people to compromise a vulnerable system. System affected: Sun Java System Web Server (Sun ONE/iPlanet) 6.x. Editor's Note: This advisory was posted because ISS refuses to grant Packet Storm permission to add their advisories.
78ccd3aaf212c484b45d7cb421cd19bccfa5557bd78795ee4c2a562eba4f2d7aSecunia Security Advisory - A vulnerability has been reported in ignitionServer, which can be exploited by malicious people to cause a DoS (Denial of Service) on vulnerable systems. The vulnerability is caused due to insufficient restrictions on the SERVER command. The command is designed for server to server communication, but can be exploited by clients to introduce non-existing servers to the network. This can further be exploited to cause a DoS by introducing multiple servers, which can potentially flood the network. The vulnerability reportedly affect versions 0.1.2 through 0.3.1.
5152ff943389a15abfd3eaec1d413ffe8878ade13f23e88ee36889021e6c7d42Simple md5 hash dictionary cracking utility.
76289551e589f0cee24b57263f994d65a5a95bf42f6cbc01e0e4369506301655Multiple filter bypass vulnerabilities have been discovered in rediffmail.com.
60835bc34e6715cb1ccaea02926f87509ad74ac27b49ff275d9a0384cbfbcad7E-mail recipients who are listed in the BCC box can be viewed by e-mail recipients who are listed in the To and CC boxes when you send a multi-part e-mail message by using Outlook Express 6.0
a3e2886d907651ad76611dcdbb2ab55198ef903ff5a237fd417cea52d0e01890NetworkEverywhere router Model NR041 suffers a script injection over DHCP vulnerability. Full exploitation provided.
903895276da12171f8f6bee9fb35c1e69c16fb6918d5717dc4151e19c8021390Next Generation Advisory NGSEC-2004-7 - NtRegmon, the Registry monitoring utility for Windows, suffers from an unvalidated pointer referencing. While any privileged user is using NtRegmon, any local and unauthorized user can crash the system. Versions below 6.12 are susceptible.
25183dcc3f859b4639c3d21491f15da6b81da0e387b46e9c99dcf6f07cb351faThe Model 5400 Series Symantec Gateway Security 2.0 has released hotfixes that address the denial of service attack issue reported against isakmpd.
deffa512afcdbd22f1b06b95302cfb62e4a31cd4a5998bed1edad3270d8d4f09Symantec Gateway Security 1.0 has released hotfixes that address the denial of service attack issue reported against isakmpd.
a44b2ae4b9fc7e3ebb3e0ca8d8c5aea506b43f951e09cb26876406012635b62cSymantec VelociRaptor 1.5 has released hotfixes that address the denial of service attack reported against isakmpd.
7c12070c1f88045cc5dc5d0c7a4b1f44d0dfcfc6aa7c843223410dd5a8a8ad4cloginject is a Syslog message injector.
83a2a25125e17e3d3927a4705739122d03d904fd4cfd7fe52c0043c06aa369cd
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed