Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability

...

Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability Revision 1.0 - FINAL For Public Release 2004 February 03 1600 UTC GMT - ---------------------------------------------------------------------------- Contents Summary...

Cisco IOS 12 MSFC2 - Layer 2 Frame Denial of Service

source: https://www.securityfocus.com/bid/9562/info A problem has been identified in the handling of specific types of traffic by Cisco 6000, 6500, and 7600 routers with the MSFC2 device. Because of this, an attacker could potentially crash a vulnerable system. !/usr/bin/perl Cisco Global Exploit...

CVE-2003-1026: Undefined Security Weakness

Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back back function is called, as demonstrated by BackToFramedJpu, aka th...

CVE-2003-0309: Undefined Security Weakness

Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause...

Microsoft Internet Explorer does not adequately validate source of dialog frame

Overview Microsoft Internet Explorer IE allows script from a dialog frame in one domain to execute in a different domain, including the Local Machine Zone. The script could read certain local files and data i.e. cookies from other web sites. In the presence of other vulnerabilities VU626395,...

Opera 6.07.0 - Username URI Warning Dialog Buffer Overflow

Opera 6.07.0 - Username URI Warning Dialog Buffer Overflow source: https://www.securityfocus.com/bid/6811/info The Opera browser for Win32 and possibly other systems is prone to a remotely exploitable buffer overflow condition. For security purposes, Opera will display a warning any time a user o...

Etherleak: Ethernet frame padding information leakage (A010603-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Etherleak: Ethernet frame padding information leakage Release Date: 01/06/2003 Application: Ethernet device driver software Platform: Multiple Severity: Information disclosure Authors: Ofir...

DEBIAN-CVE-2002-1335

Cross-site scripting XSS vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies...

CVE-2002-1335: Undefined Security Weakness

Cross-site scripting XSS vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies...

Remote Frame Pointer Overwrite vulnerability in LIB CGI in Language C.

======================================== INetCop Security Advisory 2002-0x82-007 ======================================== Title: Remote Frame Pointer Overwrite vulnerability in LIB CGI in Language C. 0x01. Description A simple mode of develop CGI in language C. The libcgi package is a library...

ColdFusion Heap Overflow -continued

Hi all, I am attempting to write exploit code for the coldfusion heap overflow still. On advice from various on the secfocus list i have installed softice and located the exception handler in question. The handler code starts at 0x77f82b95 The code I am trying to manipulate is at 0x77f8e43b Mov...

CVE-2002-1217

Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses and domain...

Linksys WET11 crashes when sent an ethernet frame from its own MAC address

enZo Notice Date: 24/10/02 Product: Linksys WET11 Wireless Bridge Mentioned By: netmask Firmware Versions: 1.3.2, 1.3.1 Advisory Url: http://www.enZotech.net/advisories/linksys.wet11.txt Problem: Linksys WET11 crashes when sent an ethernet frame from its own MAC address Risk: To each his own.. Bu...

CVE-2002-1217

The CVE-2002-1217 entry describes a Cross-Frame scripting vulnerability in the WebBrowser control as used by Internet Explorer 5.5 and 6.0. The issue arises when script accesses the Document property, bypassing / domain restrictions, enabling remote attackers to execute arbitrary code, read arbit...

CVE-2002-1217

Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses and domain...

CVE-2002-1217: Undefined Security Weakness

Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses and domain...

gm011-ie.txt

GreyMagic Security Advisory GM011-IE ===================================== By GreyMagic Software, Israel. 15 Oct 2002. Available in HTML format at http://security.greymagic.com/adv/gm011-ie/. Topic: Internet Explorer : The D-Day. Discovery date: 26 Sep 2002. Affected applications:...

Microsoft Internet Explorer 56 - Unauthorized Document Object Model Access

Microsoft Internet Explorer 56 - Unauthorized Document Object Model Access source: https://www.securityfocus.com/bid/5963/info Microsoft Internet Explorer MSIE is prone to a vulnerability that may enable a frame or iframe to gain unauthorized access to the Document Object Model DOM of other...

Internet Explorer : The D-Day

GreyMagic Security Advisory GM011-IE ===================================== By GreyMagic Software, Israel. 15 Oct 2002. Available in HTML format at http://security.greymagic.com/adv/gm011-ie/. Topic: Internet Explorer : The D-Day. Discovery date: 26 Sep 2002. Affected applications:...