wicd

New wicd packages are available for Slackware 12.2 and -current to fix a security issue with the D-Bus configuration file that could allow local information disclosure such as network credentials. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

mozilla-firefox

New mozilla-firefox packages are available for Slackware 12.2 and -current to fix security issues. More details about the issues may be found on the Mozilla website: http://www.mozilla.org/security/known-vulnerabilities/firefox30.html Here are the details from the Slackware 12.2 ChangeLog:...

Slackware 12.2 / current : xdg-utils (SSA:2009-033-01)

New xdg-utils packages are available for Slackware 12.2 and -current to fix security issues. Applications that use /etc/mailcap could be tricked into running an arbitrary script through xdg-open, and a separate flaw in xdg-open could allow the execution of arbitrary commands embedded in untrusted...

ntp

New ntp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to a fix security issue. More details about this issue may be found here: https://lists.ntp.org/pipermail/announce/2009-January/000055.html...

SeaMonkey 1.1.14 - Denial of Service

SeaMonkey 1.1.14 - Denial of Service !/usr/bin/perl SeaMonkey "; $data .= "SeaMonkey "; $data .= "" x900; $data .= ""; openFILE,'',$file or die'file error'; print FILE $data; closeFILE; sub usage print "\n+---------------------------------------------------------+\r". "\n| SeaMonkey = 1.1.14...

SeaMonkey <= 1.1.14 (marquee) Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================================= SeaMonkey "; $data .= "SeaMonkey "; $data .= "" x900; $data .= ""; openFILE,'',$file or die'file error'; print FILE $data; closeFILE; sub usage print...

SeaMonkey 1.1.14 - Denial of Service

!/usr/bin/perl SeaMonkey "; $data .= "SeaMonkey "; $data .= "" x900; $data .= ""; openFILE,'',$file or die'file error'; print FILE $data; closeFILE; sub usage print "\n+---------------------------------------------------------+\r". "\n| SeaMonkey = 1.1.14 marquee Denial of Service Exploit |\r"...

samba

New samba packages are available for Slackware 12.2 and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0022 Here are the details from the Slackware 12.2 ChangeLog:...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found on the Mozilla website: http://www.mozilla.org/security/known-vulnerabilities/firefox20.html...

Cisco IOS协议独立组播多个拒绝服务漏洞

BUGTRAQ ID: 31356 CVE ID: CVE-2008-3808 CVE-2008-3809 CNCVE ID：CNCVE-20083808 CNCVE-20083809 Cisco IOS PIM是支持网络中的IP组播路由，允许网络接收所请求的组播流量的协议实现。 Cisco IOS软件处理特殊构建的PIM报文存在问题，可导致拒绝服务攻击。运行Cisco IOS软件和配置了PIM的设备受第一个漏洞影响，配置为PIM的Cisco 12000 Series GSR路由器受第二个漏洞影响。 Cisco...

PT-2008-5158 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.2 and 12.4 Description: The issue is related to a Denial of Service DoS attack from specially crafted packets in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS. This can cause memory...

Debian Security Advisory DSA 317-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory DSA 317-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1398

CVE-2003-1398 affects Cisco IOS 12.0–12.2 when IP routing is disabled. The vulnerability allows remote attackers to cause a denial of service by sending false ICMP redirect messages, which can modify network routing. Connected sources corroborate the issue as a router-directed DoS via ICMP redire...

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service source: https://www.securityfocus.com/bid/25352/info Cisco IOS is prone to a remote denial-of-service vulnerability because the software fails to properly handle certain CLI commands. To issue commands that trigger this vulnerability,...

Code injection

Unspecified vulnerability in the server side of the Secure Copy SCP implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors...

Cisco IOS TCP Listener Crafted Packets Remote DoS (CSCek37177)

The remote CISCO switch runs a version of IOS contains a flaw which may cause the remote router to crash when processing specially malformed TCP packets. An attacker might use these flaws to crash this router remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

PT-2004-1685 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 11.1x through 11.3x Cisco IOS versions 12.0x through 12.2x Description: The issue allows remote attackers to cause a denial of service, resulting in a device reload, via malformed BGP OPEN or UPDATE messages. A Cisco device...

CVE-2003-0511

CVE-2003-0511 affects Cisco Aironet AP1x00 series running IOS 12.2. A malformed URL can cause the web server to reload, enabling a denial-of-service condition. The vulnerability is addressed in IOS 12.2(11)JA1. Remediation/workarounds documented by Cisco include: (1) restrict access to the HTTP s...

CVE-2003-0567

Cisco IOS 11.x and 12.0–12.2 are affected by CVE-2003-0567. By sending a specific sequence of IPv4 packets to a router’s interface, an attacker can cause the input queue to become full and trigger a denial of service, potentially stopping traffic processing on that interface and affecting related...

CVE-2002-0339

Cisco IOS CVE-2002-0339 affects IOS 11.1CC–12.2 with Cisco Express Forwarding (CEF) enabled. The issue leaks fragments of previously processed packets by padding MAC-level packets to match the IP length, using data from earlier packets. Impact is information disclosure via network access; attacke...