4106 matches found
Rebase aide to 0.13.1
Red Hat Enterprise Linux RHEL 5 ships the rpm for the Advanced Intrusion Detection Environment AIDE before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files...
Moderate: Red Hat Security Advisory: aide security update
An updated aide package that fixes various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Advanced Intrusion Detection Environment AIDE is a file integrity checker and intrusion detection...
Design/Logic Flaw
eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessi...
CVE-2007-4609
eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessi...
CVE-2007-4609
eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessi...
CVE-2007-4609
eyeOS is affected by CVE-2007-4609 due to predictable checksum values in the checknum parameter used for access control. This allows remote attackers to abuse doCreateUser to register many accounts and add many eyeBoard messages via addMsg, potentially causing denial of service or enabling unauth...
eyeOS checksum prediction
Subject: eyeOS checksum prediction Author: Andrej Komarov [email protected] eyeOS operates with special intermediate checksums in plaintext. Without its validation it is impossible to make new actions to login, start new services. There is way to predict eyeOS checksum. If it is automated from...
The RIP dynamic routing Protocol attack-vulnerability warning-the black bar safety net
Graphic version of the download address http://www.i170.com/attach/1ACE62D7-1AD6-4F40-AAEC-CB94B07C833A Author:qimingliu Blog:http://john. i170. cn Email:[email protected] A network structure figure ! II configure the RIP routing Protocol On Router A ON do the following RIP routing configuration...
libpng library DoS
Crash on invalid grauscale images tRNS chunk checksum...
Fedora Core 6 : kernel-2.6.20-1.2944.fc6 (2007-432)
Updated to upstream linux kernel 2.6.20.6: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.5 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.6 CVE-2007-1357: The atalksumskb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote...
CVE-2007-2041
Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...
Design/Logic Flaw
Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...
CVE-2007-2041
CVE-2007-2041 affects Cisco Wireless LAN Controller (WLC) before 4.0.206.0. The WLAN ACL configuration is saved with an invalid checksum, causing WLAN ACLs to fail loading at boot and potentially allowing remote attackers to bypass intended access restrictions (Bug ID CSCse58195). The provided so...
CVE-2007-2041
Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...
linux/x86 raw-socket ICMP/checksum shell 235 byte
Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 raw-socket ICMP/checksum shell 235 byte ================================================= ; ; Copyright c 2007 by ; ; 235-byte raw-socket ICMP/checksum shell - x86-lnx ; by mu-b - Nov...
linux/x86 - raw-socket ICMP/checksum shell 235 bytes
linux/x86 raw-socket ICMP/checksum shell 235 byte. Shellcode exploit for linx86 platform ; ; Copyright c 2007 by ; ; 235-byte raw-socket ICMP/checksum shell - x86-lnx ; by mu-b - Nov 2006 ; ; icmp with identifier flagbyte and commands in the ; following format:- ; "/bin/sh\x00-c\x00\x00" ; ; unli...
linux/x86 raw-socket ICMP/checksum shell 235 byte
No description provided by source. ; ; Copyright c 2007 by [email protected] ; ; 235-byte raw-socket ICMP/checksum shell - x86-lnx ; by mu-b - Nov 2006 ; ; icmp with identifier flagbyte and commands in the ; following format:- ; "/bin/sh\x00-c\x00command here\x00" ; ; unlike other icmp shells,...
Design/Logic Flaw
Unspecified vulnerability in Distributed Checksum Clearinghouse DCC before 1.3.51 allows remote attackers to delete or add hosts in /var/dcc/maps...
CVE-2007-1047
Unspecified vulnerability in Distributed Checksum Clearinghouse DCC before 1.3.51 allows remote attackers to delete or add hosts in /var/dcc/maps...
CVE-2007-1047
Distributed Checksum Clearinghouse (DCC) before 1.3.51 is affected by an unspecified vulnerability that enables remote attackers to delete or add hosts in /var/dcc/maps. The CVE entry notes a network-accessible impact with partial confidentiality/integrity/availability implications (CVSS2 base sc...