CVE-2006-7178

CVE-2006-7178 affects the MadWifi driver prior to 0.9.3. The issue arises from improper handling of an AUTH frame by an IBSS node, allowing remote attackers within wireless range to cause a denial-of-service (system crash/hang). Publicly documented in various advisories (SUSE GLSA 200704-15, Gent...

Ethernet Device Drivers Frame Padding Info Leakage Exploit (Etherleak)

No description provided by source. !/usr/bin/perl -w etherleak, code that has been 5 years coming. On 04/27/2002, I disclosed on the Linux Kernel Mailing list, a vulnerability that would be come known as the 'etherleak' bug. In various situations an ethernet frame must be padded to reach a specif...

Unfixed Frame Redirect vulnerability at www.tuinkrant.com

Security researcher SekoMirza, has submitted on 23/03/2007 a Frame Redirect vulnerability affecting www.tuinkrant.com, which at the time of submission ranked 481073 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/03/2007. It is currently...

Unfixed Frame Redirect vulnerability at www.destino-tunez.com

Security researcher SekoMirza, has submitted on 23/03/2007 a Frame Redirect vulnerability affecting www.destino-tunez.com, which at the time of submission ranked 1325045 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/03/2007. It is currentl...

Ethernet Device Drivers Frame Padding - 'Etherleak' Infomation Leakage

!/usr/bin/perl -w etherleak, code that has been 5 years coming. On 04/27/2002, I disclosed on the Linux Kernel Mailing list, a vulnerability that would be come known as the 'etherleak' bug. In various situations an ethernet frame must be padded to reach a specific size or fall on a certain...

Linux Kernel 2.0.x/2.2.x/2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure

source: https://www.securityfocus.com/bid/6535/info Network device drivers for several vendors have been reported to disclose potentially sensitive information to attackers. Frames that are smaller than the minimum frame size should have the unused portion of the frame buffer padded with null or...

Unfixed Frame Redirect vulnerability at www.xlnc1.org

Security researcher SekoMirza, has submitted on 23/03/2007 a Frame Redirect vulnerability affecting www.xlnc1.org, which at the time of submission ranked 523087 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/03/2007. It is currently unfixed...

Linux Kernel 2.0.x2.2.x2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure

Linux Kernel 2.0.x2.2.x2.4.x FreeBSD 4.x - Network Device Driver Frame Padding Information Disclosure source: https://www.securityfocus.com/bid/6535/info Network device drivers for several vendors have been reported to disclose potentially sensitive information to attackers. Frames that are small...

Unfixed Frame Redirect vulnerability at piramidemusic.amboto.net

Security researcher SekoMirza, has submitted on 19/03/2007 a Frame Redirect vulnerability affecting piramidemusic.amboto.net, which at the time of submission ranked 626438 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/03/2007. It is...

mercurypown-v1.pl.txt

!/usr/bin/perl mercurypown-v1.pl Mercury/32 Connected\n"; $buf = "1 LOGIN"." "x$LEN-$BUFLEN."\255\n"; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending payload\n"; $buf = $NOP x 255; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending payload 2\n"; $buf = $NOP x $BUFLEN; sendSOCKET, $buf, 0...

Mercury32 Mail Server 4.01b - check Buffer Overflow (PoC)

Mercury32 Mail Server 4.01b - check Buffer Overflow PoC !/usr/bin/perl mercurypown-v1.pl Mercury/32 Connected\n"; $buf = "1 LOGIN"." "x$LEN-$BUFLEN."\255\n"; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending payload\n"; $buf = $NOP x 255; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending...

Unfixed Frame Redirect vulnerability at www.aspindir.com

Security researcher St@rExT, has submitted on 03/06/2007 a Frame Redirect vulnerability affecting www.aspindir.com, which at the time of submission ranked 21589 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/06/2007. It is currently unfixed...

CVE-2007-1218

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

CVE-2007-1218

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

Heap overflow

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

DEBIAN-CVE-2007-1218

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

CVE-2007-1218

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

CVE-2007-1218

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

Improvements to help protect against Cross-Site Scripting attacks — Mozilla

Firefox 2.0.0.2 and 1.5.0.10 contain several small changes that will make it easier for sites to protect their visitors against Cross-Site Scripting XSS attacks. Invalid trailing characters in HTML tag attributes The Mozilla parser formerly ignored invalid trailing characters in HTML tag attribut...

MDKA-2006:046 : bootsplash

When multiple profiles are configured, they can be choosen in the bootloader with the PROFILE keyword, but this needs a dedicated entry or to append manually the profile at each boot. To ease the choice of the profile during the boot time, Mandriva developed a frame buffer menu in GTK to choose t...