CVE-2007-1217

Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service crash and possibly gain privileges via a crafted CAPI packet...

CVE-2007-1217

Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service crash and possibly gain privileges via a crafted CAPI packet...

CVE-2007-1217

Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service crash and possibly gain privileges via a crafted CAPI packet...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:002)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which could allow a local user to cause a Denial of Service process crash CVE-2006-5173. Th...

security flaw

Multiple buffer overflows in the cmtprecvinteropmsg function in the Bluetooth driver net/bluetooth/cmtp/capi.c in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via CAPI...

CVE-2006-6106

Multiple buffer overflows in the cmtprecvinteropmsg function in the Bluetooth driver net/bluetooth/cmtp/capi.c in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via CAPI...

Linux Kernel蓝牙CAPI报文远程溢出漏洞

Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel对入站CAPI消息没有执行正确的处理，远程攻击者可能利用此漏洞在服务器上执行任意指令。 Linux Kernel代码的net/bluetooth/cmtp/capi.c文件中没有正确地处理入站的CAPI消息。如果用户发送了特制的CAPI报文的话，就可能触发缓冲区溢出，覆盖某些内核数据结构，导致执行任意指令。net/bluetooth/cmtp/capi.c中漏洞代码如下： case CAPIFUNCTIONGETSERIALNUMBER: controller =...

[SA23408] Linux Kernel Bluetooth CAPI Messages Denial of Service

TITLE: Linux Kernel Bluetooth CAPI Messages Denial of Service SECUNIA ADVISORY ID: SA23408 VERIFY ADVISORY: http://secunia.com/advisories/23408/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Linux Kernel 2.4.x http://secunia.com/product/763/ DESCRIPTION: A vulnerability...

Linux Kernel Bluetooth CAPI DoS

It's possible to overwrite internal kernel objects with CAPI message...

Debian DSA-1165-1 : capi4hylafax - missing input sanitising

Lionel Elie Mamane discovered a security vulnerability in capi4hylafax, tools for faxing over a CAPI 2.0 device, that allows remote attackers to execute arbitrary commands on the fax receiving system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...