Searching ras pptp software vulnerabilities

The default permissions for the RAS Administrat

vulnerabilities | Administration | Permissions" | permissions | arbitrary | malicious | "Registry | changing | commands | execute | default | Windows | allows | point | local | users | value | key | RAS | DLL | aka | one |

The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities.


Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows

firewall | Snapgear | Lite+ |

Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number of connections to (1) the HTTP web management port, or (2) the PPTP port.


ctrlpacket.c in PoPToP PPTP server before 1.1.4

ctrlpacketc | operation | attackers | overflow | negative | leading | service | length | before | buffer | server | causes | allows | remote | PoPToP | 114-b3 | denial | value | cause | field | which | PPTP | into | read | via | fed |

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.


Multiple off-by-one vulnerabilities in Ethereal

vulnerabilities | off-by-one | Ethereal | Multiple |

Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.


SMC Networks Barricade Wireless Cable/DSL Broad

SMC7004VWBR | Cable/DSL | Broadband | attackers | Barricade | Networks | Wireless | packets | service | certain | denial | allows | Router | remote | cause | PPTP | port | via | SMC |

SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface.


The PPTP server in Astaro Security Linux before

Security | before | Astaro | server | Linux | PPTP |

The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks.


Ingate Firewall 4.1.3 and earlier does not term

Firewall | Ingate |

Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources.


Unspecified "PPTP Remote DoS Vulnerability" in

Vulnerability" | Unspecified | Security | Astaro | Remote | "PPTP | Linux | DoS |

Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to cause a denial of service.


ip_nat_pptp in the PPTP NAT helper (netfilter/i

ip_nat_pptp | helper | PPTP | NAT |

ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service (memory corruption or crash) via an inbound PPTP_IN_CALL_REQUEST packet that causes a null pointer to be used in an offset calculation.


ip_nat_pptp in the PPTP NAT helper (netfilter/i

ip_nat_pptp | helper | PPTP | NAT |

ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service (memory corruption or crash) via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linear SKBs (socket buffers) are used.


Multiple integer overflows in the image loader

overflows | plug-ins | Multiple | integer | loader | before | image | GIMP |

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.


pptpgre.c in PoPToP Point to Point Tunneling Se

Tunneling | pptpgrec | Server | PoPToP | Point |

pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connection tear-down) via (1) GRE packets with out-of-order sequence numbers or (2) certain GRE packets that are processed using a wrong pointer and improperly dequeued.


Stack-based buffer overflow in the set_color_ta

set_color_table | Stack-based | function | overflow | sunrasc | plugin | SUNRAS | buffer | Gimp |

Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.


Software vulnerabilities results 1 to 14 of 14     
Page: 1