ATA interface software may not properly handle ATA security features

Overview ATA interface software, including multiple system board BIOS implementations do not adequately manage the ATA hard drive security mode. An attacker may be able to manipulate this situation to completely lock a hard drive resulting in an almost unrecoverable denial-of-service condition...

kernel security and bug fix update

2.6.18-308.8.1.el5 - net sock: validate datalen before allocating skb in sockallocsendpskb Jason Wang 816290 816106 CVE-2012-2136 - net tg3: Fix VLAN tagging assignments John Feeney 817691 797011 - net ixgbe: do not stop stripping VLAN tags in promiscuous mode Andy Gospodarek 809791 804800 - s390...

broadcast-ataoe-discover NSE Script

Discovers servers supporting the ATA over Ethernet protocol. ATA over Ethernet is an ethernet protocol developed by the Brantley Coile Company and allows for simple, high-performance access to SATA drives over Ethernet. Discovery is performed by sending a Query Config Request to the Ethernet...

RedHat Update for kernel RHSA-2010:0146-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0146-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CentOS 4 : kernel (CESA-2010:0146)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

kernel security update

CentOS Errata and Security Advisory CESA-2010:0146 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

FreeBSD IATA驱动本地拒绝服务漏洞

CVECAN ID: CVE-2009-2649 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD所使用的IATA（ATA）驱动中存在安全漏洞。如果本地用户能够读访问/dev的话，就可以通过特制的IOCTL请求触发用很大的值调用malloc，导致内核忙碌。 FreeBSD FreeBSD 8.0 FreeBSD FreeBSD 6.0 厂商补丁： FreeBSD ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2009-2649

CVE-2009-2649 affects the FreeBSD IATA (ATA) driver on FreeBSD 6.0 and 8.0. If an attacker has read access to /dev, a crafted IOCTL request with a large count can trigger a malloc call with a large value, causing a local denial-of-service (kernel panic). The exploit requires local access and is d...

FreeBSD 6/8 (ata device) Local Denial of Service Exploit

No description provided by source. / atapanic.c by Shaun Colley, 13 July 2009 this panics the freebsd kernel by passing a large value to malloc9 in one of fbsd's ata ioctl's. tested on freebsd 6.0 and 8.0. you need read access to the ata device in /dev to be able to open the device. chain with so...

FreeBSD 6/8 (ata device) Local Denial of Service Exploit

Exploit for freebsd platform in category dos / poc ======================================================== FreeBSD 6/8 ata device Local Denial of Service Exploit ======================================================== / atapanic.c by Shaun Colley, 13 July 2009 this panics the freebsd kernel by...

FreeBSD 68 - ata Device Local Denial of Service

FreeBSD 68 - ata Device Local Denial of Service / atapanic.c by Shaun Colley, 13 July 2009 this panics the freebsd kernel by passing a large value to malloc9 in one of fbsd's ata ioctl's. tested on freebsd 6.0 and 8.0. you need read access to the ata device in /dev to be able to open the device...

FreeBSD 6/8 - ata Device Local Denial of Service

/ atapanic.c by Shaun Colley, 13 July 2009 this panics the freebsd kernel by passing a large value to malloc9 in one of fbsd's ata ioctl's. tested on freebsd 6.0 and 8.0. you need read access to the ata device in /dev to be able to open the device. chain with some race condition bug? - shaun /...

Solaris Update for ata and dpt driver 109798-04

Check for the Version of ata and dpt driver OpenVAS Vulnerability Test Solaris Update for ata and dpt driver 109798-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Solaris Update for ata and dpt driver 109798-04

Check for the Version of ata and dpt driver OpenVAS Vulnerability Test Solaris Update for ata and dpt driver 109798-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Solaris Update for ata Driver 117122-03

Check for the Version of ata Driver OpenVAS Vulnerability Test Solaris Update for ata Driver 117122-03 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris Update for ata Driver 117122-03

Check for the Version of ata Driver OpenVAS Vulnerability Test Solaris Update for ata Driver 117122-03 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1787-1 [email protected] http://www.debian.org/security/ Dann Frazier May 2, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

Ubuntu 8.10 : linux vulnerabilities (USN-715-1)

Hugo Dias discovered that the ATM subsystem did not correctly manage socket counts. A local attacker could exploit this to cause a system hang, leading to a denial of service. CVE-2008-5079 It was discovered that the inotify subsystem contained watch removal race conditions. A local attacker coul...

Xplode CMS - wrap_script SQL Injection

Xplode CMS - wrapscript SQL Injection --------------------------------------------------------------------------------------------- scriptname: Xplode Cms Xplode SQL Injection Vulnerabilities Author: PLATEN contact: PLATEN.SecureatGmail.com web: Www.ata-turk.tk & www.deltahacking.net big tnx:...

Arcadwy Games CMS SQL Injection

--------------------------------------------------------------------------------------------- scriptname: Arcadwy Games Cms Arcadwy Games Cms Auth Bypass SQL Injection Vulnerability Author: PLATEN contact: PLATEN.SecureatGmail.com web: Www.ata-turk.tk & www.deltahacking.net big tnx: b3hz4d...