Windows Bluetooth栈bthport.sys驱动程序远程代码执行漏洞(MS11-053)

BUGTRAQ ID: 48617 CVE ID: CVE-2011-1265 Microsoft Windows Bluetooth stack是蓝牙协议栈的实现。 Microsoft Windows Bluetooth stack在实现上存在远程代码执行漏洞，远程攻击者可通过发送特制的蓝牙报文到受影响系统利用此漏洞导致远程代码执行。此漏洞仅影响带有蓝牙功能的系统。 漏洞源于访问未能正确初始化或处理已经被删除内存对象的方式存在的问题。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows 7...

CVE-2011-1265

The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that 1 were not properly initialized or 2 have been deleted, which allows remote attackers to execute arbitrary code via crafted Bluetooth packets, aka "Bluetooth...

CVE-2011-1265

CVE-2011-1265 corresponds to a remote code execution vulnerability in the Windows Bluetooth Stack (Bluetooth Stack 2.1) affecting Windows Vista SP1/SP2 and Windows 7 SP1/Gold where memory objects not properly initialized or already deleted can be accessed via crafted Bluetooth packets. The root c...

Microsoft Bluetooth Stack Remote Code Execution Vulnerability (2566220)

This host is missing a critical security update according to Microsoft Bulletin MS11-053. OpenVAS Vulnerability Test $Id: secpodms11-053.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Bluetooth Stack Remote Code Execution Vulnerability 2566220 Authors: Madhuri D Updated By: Madhuri D - Used WMI...

MS11-053: Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (2566220)

The remote host contains a version of the Windows Bluetooth stack that is affected by a code execution vulnerability. By sending a series of specially crafted Bluetooth packets to an affected system, an attacker could install programs; view, change, or delete data; or create new accounts with ful...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:119)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The exitnotify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAPKILL capability is held, which allows local users to send an arbitrary signal to a process by...

CVE-2010-1265

creationtimestamp| type| source ---|---|--- 2010-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11884...

SLES10: Security update for the Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...

SLES10: Security update for the Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...

SuSE 11 Security Update : perl-IO-Socket-SSL (SAT Patch Number 1265)

This update of perl-IO-Socket-SSL improves the hostname checking of the SSL certificate. CVE-2009-3024 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE Security Advisory SUSE-SA:2009:032 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:032. OpenVAS Vulnerability Test $Id: susesa2009032.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:032 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1800-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1800-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1800-1 [email protected] http://www.debian.org/security/ dann frazier May 15, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1800-1 linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

Linux Kernel af_rose实现整数溢出漏洞

BUGTRAQ ID: 34654 CVECAN ID: CVE-2009-1265 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的sys/net/afrose.c文件中的rosesendmsg函数没有正确地验证报文中的len值。假设len为很大的值，如0xfffffff8，则size就可能会被溢出： size = len + AX25BPQHEADERLEN + AX25MAXHEADERLEN + ROSEMINLEN; 导致生成的缓冲区过小： if skb = sockallocsendskbsk, size, msg-msgflag...

HP-UX Update for RPC HPSBUX01020

Check for the Version of RPC OpenVAS Vulnerability Test HP-UX Update for RPC HPSBUX01020 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

CVE-2009-1265

Integer overflow in rosesendmsg sys/net/afrose.c in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent...

CVE-2009-1265

The CVE-2009-1265 issue affects the Linux kernel up to 2.6.30-rc1, specifically a integer overflow in rose_sendmsg (sys/net/af_rose.c) that can cause leakage of memory (“garbage”) via a large length value over the network. Remote attackers could obtain sensitive information. Affected: Linux kerne...

CVE-2008-1265

The CVE-2008-1265 issue affects the Linksys WRT54G router. A remote attacker can trigger a denial of service (device restart) by sending an excessively long username and password to the FTP interface. The available sources confirm the vulnerability mechanism and impact, but do not provide exploit...

Debian: Security Advisory (DSA-922-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...