Security fix for the ALT Linux 6 package freeradius version 2.1.3-1

Dec. 4, 2008 John Dennis &[email protected] - 2.1.3-1 - upgrade to latest upstream release, upstream summary follows: The focus of this release is stability. Feature Improvements: Allow running with "user=radiusd" and binding to secure sockets. Start sending Status-Server "are you alive"...

[SECURITY] Fedora 10 Update: cobbler-1.2.9-1.fc10

Cobbler is a network boot and update server. Cobbler supports PXE, provisioning virtualized images, and reinstalling existing Linux machines. The last two modes require a helper tool called 'koan' that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs...

[SECURITY] Fedora 9 Update: cobbler-1.2.9-1.fc9

Cobbler is a network boot and update server. Cobbler supports PXE, provisioning virtualized images, and reinstalling existing Linux machines. The last two modes require a helper tool called 'koan' that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs...

[SECURITY] Fedora 8 Update: cobbler-1.2.9-1.fc8

Cobbler is a network boot and update server. Cobbler supports PXE, provisioning virtualized images, and reinstalling existing Linux machines. The last two modes require a helper tool called 'koan' that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs...

Sun Solaris DHCP请求处理拒绝服务及代码执行漏洞

BUGTRAQ ID: 32213 CVECAN ID: CVE-2007-5365 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的DHCP服务器（in.dhcpd1M）处理DHCP请求中的安全漏洞可能允许远程非特权用户杀死DHCP服务进程（拒绝服务）或以root用户权限执行任意指令。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 -...

Sun Solaris DHCP请求处理漏洞

CVE ID：CVE-2007-5365 Sun Solaris是一款商业性质的操作系统。 Sun Solaris处理DHCP请求存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 -处理DHCP请求时in.dhcpd存在边界错误，可导致缓冲区溢出。 -处理DHCP请求时in.dhcpd存在一个未明错误，可导致DHCP服务器守护程序崩溃或以root权限执行任意代码。 Sun Solaris 10 Sun Solaris 8 Sun Solaris 9 可参考如下补丁： -- SPARC Platform -- Solaris 8:...

CVE-2008-5010

in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows remote attackers to cause a denial of service assertion failure and daemon exit via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805...

Design/Logic Flaw

in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows remote attackers to cause a denial of service assertion failure and daemon exit via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805...

CVE-2008-5010

in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows remote attackers to cause a denial of service assertion failure and daemon exit via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805...

CVE-2008-5010

CVE-2008-5010 affects Sun Solaris 8–10 DHCP server (in.dhcpd) and OpenSolaris prior to snv_103. The issue allows a remote attacker to trigger a denial of service (assertion failure and daemon exit) via unknown DHCP requests related to the “number of offers” (Bug ID 6713805). The vulnerability is ...

DHCP Client Detection

Binary data 4716.prm...

Security Best Practice: Adobe Flash Proxy Auto-Discovery DHCP Traffic Inspection

The Dynamic Host Configuration Protocol DHCP is a protocol used by networked devices to obtain the parameters necessary for operation in an Internet Protocol network. This protocol reduces system administration workload, allowing devices to be added to the network with little or no manual...

Gentoo Security Advisory GLSA 200808-05 (dhcp)

The remote host is missing updates announced in advisory GLSA 200808-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Sagem Routers F@ST Remote CSRF Exploit (dhcp hostname attack)

No description provided by source. !/usr/bin/env python OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO...

Gentoo Security Advisory GLSA 200808-05 (dhcp)

The remote host is missing updates announced in advisory GLSA 200808-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sagem Routers [email protected] Remote CSRF Exploit (dhcp hostname attack)

Exploit for hardware platform in category remote exploits ============================================================= Sagem Routers email protected Remote CSRF Exploit dhcp hostname attack ============================================================= !/usr/bin/env python OOO OOO OO OOO O O O O ...

sagem-xsrf.txt

!/usr/bin/env python OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO OOOOOO OOOOO OOOOO OOOOOO OOO OOO OO...

Sagem F@ST Routers - DHCP Hostname Cross-Site Request Forgery

Sagem F@ST Routers - DHCP Hostname Cross-Site Request Forgery !/usr/bin/env python OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O ...

Sagem F@ST Routers - DHCP Hostname Cross-Site Request Forgery

!/usr/bin/env python OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO OOOOOO OOOOO OOOOO OOOOOO OOO OOO OO...

Dnsmasq DCHP租期多个远程拒绝服务漏洞

BUGTRAQ ID: 31017 CVE ID：CVE-2008-3350 CNCVE ID：CNCVE-20083350 Dnsmasq是一款轻量级的DNS服务程序。 Dnsmasq处理租期存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 -当未知客户端尝试刷新DHCP租期时存在问题可导致应用程序崩溃。 -当一个没有租期的主机处理DHCPINFORM时可导致应用程序崩溃。 Gentoo net-dns/dnsmasq 2.43 Dnsmasq Dnsmasq 2.43 升级到最新版本：...