CVE-2012-6435

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the CPU to stop logic execution and enter a fault state, a DoS can occur. This situation could cause loss of availabili...

CVE-2012-6441 Rockwell Automation ControlLogix PLC Information Exposure

An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality. Rockwell Automation EtherNet/I...

CVE-2012-6439 Rockwell Automation ControlLogix PLC Improper Access Control

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s configuration and network parameters, a DoS condition can occur. This situation could cause loss of...

CVE-2012-6441

CVE-2012-6441 is an information-exposure vulnerability affecting Rockwell Automation EtherNet/IP products, including 1756-ENBT/1768-ENBT/1768-EWEB modules, CompactLogix/L18-L19 controllers, GuardLogix, SoftLogix, MicroLogix 1100/1400, and associated NICs and adapters. The issue arises when the de...

CVE-2012-6435

CVE-2012-6435 affects Rockwell Automation EtherNet/IP products (e.g., 1756-ENBT/ENBT, 1768-ENBT/EWEB, CompactLogix L32E/L35E, 1788-ENBT, 1794-AENTR, MicroLogix 1100/1400, and various ControlLogix/GuardLogix/SoftLogix platforms). The issue allows a CIP message from an unauthorized source to ports ...

Microsoft FAST Search Server 2010 for SharePoint RCE Vulnerabilities (2742321)

This host is missing an important security update according to Microsoft Bulletin MS12-067. OpenVAS Vulnerability Test $Id: secpodms12-067.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft FAST Search Server 2010 for SharePoint RCE Vulnerabilities 2742321 Authors: Madhuri D Copyright: Copyright...

Symantec Enterprise Vault < 10.0.2 Multiple Vulnerabilities in Oracle Outside-In Libraries (SYM12-015)

The version of Symantec Enterprise Vault installed on the remote host uses a version of the Oracle Outside-In libraries that contains multiple vulnerabilities. A remote attacker could send an email with a malicious attachment to be downloaded and stored in a user's mail box until processed for...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - It was found that the receive hook in the ipipinit function in the ipip module, and in the ipgreinit function in the ipgre module, could be called before netwo...

CVE-2012-1768

Technical details about CVE-2012-1768 are not provided in the connected documents. The sources reference the vulnerability family (Oracle Outside In/FAST) and MS12-067 context, but no explicit affected products, versions, or fixes are listed here. Monitor for updates.

CVE-2011-1768

The CVE-2011-1768 entry affects the Linux kernel, specifically the tunnels implementation. It states that when tunnel functionality is compiled as a module (pre-2.6.34), a remote attacker can trigger a denial of service (OOPS) by sending a packet during module loading. This is tied to the kernel’...

RedHat Update for kernel RHSA-2011:0928-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for kernel RHSA-2011:0928-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2011:0928-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Ubuntu Update for linux-fsl-imx51 USN-1271-1

Ubuntu Update for Linux kernel vulnerabilities USN-1271-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12711.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-fsl-imx51 USN-1271-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

USN-1271-1 : linux-fsl-imx51 vulnerabilities

It was discovered that CIFS incorrectly handled authentication. When a user had a CIFS share mounted that required authentication, a local user could mount the same share without knowing the correct password. CVE-2011-1585 It was discovered that the GRE protocol incorrectly handled netns...

USN-1218-1: Linux kernel vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

USN-1216-1: Linux kernel (EC2) vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

Ubuntu: Security Advisory (USN-1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux内核隧道初始化远程拒绝服务漏洞

Bugtraq ID: 47853 CVE ID：CVE-2011-1768 Linux是一款开放源代码的操作系统。 net/ipv6/ip6tunnel.c文件中IPv6隧道初始化函数包含如下代码： / 02 ip6tunnelinit - register protocol and reserve needed resources 03 04 Return: 0 on success 05 / 06 07 static int init ip6tunnelinitvoid 08 09 int err; 10 11 if xfrm6tunnelregister&ip4ip6handle...

CVE-2010-1768

CVE-2010-1768 affects Apple iTunes prior to 9.1. It is caused by an insecure file operation in the handling of log files during syncing a mobile device (iPhone/iPad/iPod touch), allowing a local user to gain the privileges of the console user. The vulnerability is addressed by iTunes 9.1 with imp...

CVE-2010-1768

Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch...