Debian: Security Advisory (DSA-174)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1128-1 (heartbeat)

The remote host is missing an update to heartbeat announced via advisory DSA 1128-1. Yan Rong Ge discovered that wrong permissions on a shared memory page in heartbeat, the subsystem for High-Availability Linux could be exploited by a local attacker to cause a denial of service. OpenVAS...

Debian Security Advisory DSA 761-1 (heartbeat)

The remote host is missing an update to heartbeat announced via advisory DSA 761-1. Eric Romang discovered several insecure temporary file creations in heartbeat, the subsystem for High-Availability Linux. For the old stable distribution woody these problems have been fixed in version 0.4.9.0l-7....

Debian Security Advisory DSA 761-2 (heartbeat)

The remote host is missing an update to heartbeat announced via advisory DSA 761-2. The security update DSA 761-1 for pdns contained a bug which caused a regression. This problem is corrected with this advisory. For completeness below please find the original advisory text: Eric Romang discovered...

Debian Security Advisory DSA 761-1 (heartbeat)

The remote host is missing an update to heartbeat announced via advisory DSA 761-1. Eric Romang discovered several insecure temporary file creations in heartbeat, the subsystem for High-Availability Linux. For the old stable distribution woody these problems have been fixed in version 0.4.9.0l-7....

SuSE 10 Security Update : heartbeat (ZYPP Patch Number 1978)

This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

Ubuntu 5.04 / 5.10 / 6.06 LTS : heartbeat vulnerability (USN-335-1)

Yan Rong Ge discovered that heartbeat did not sufficiently verify some packet input data, which could lead to an out-of-boundary memory access. A remote attacker could exploit this to crash the daemon Denial of Service. Note that Tenable Network Security has extracted the preceding description...

Ubuntu 5.04 / 5.10 / 6.06 LTS : heartbeat vulnerability (USN-326-1)

Yan Rong Ge discovered that heartbeat did not set proper permissions for an allocated shared memory segment. A local attacker could exploit this to render the heartbeat service unavailable Denial of Service. Note that Tenable Network Security has extracted the preceding description block directly...

openSUSE 10 Security Update : heartbeat (heartbeat-2139)

This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. CVE-2006-3815,CVE-2006-3121 %NASLMINLEVEL 70300 C Tenable Network...

TS-2007-001-0: BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability

Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability Date: 2007-07-29 Advisory ID: TS-2007-001-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details...

Heartbeat claster software multiple DoS conditions

shmget shared memory section call weak permissions. remote DoS on heartbeat network messages parsing...

Mandrake Linux Security Advisory : heartbeat (MDKSA-2006:142)

Two vulnerabilities in heartbeat prior to 2.0.6 was discovered by Yan Rong Ge. The first is that heartbeat would set insecure permissions in an shmget call for shared memory, allowing a local attacker to cause an unspecified denial of service via unknown vectors CVE-2006-3815. The second is a...

CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

DEBIAN-CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

L2TPNS Heartbeat处理拒绝服务漏洞

l2tpns处理超大"心跳"包存在问题，可导致拒绝服务攻击。 目前没有详细漏洞细节提供。 l2tpns l2tpns 2.1 l2tpns l2tpns 2.0.13 l2tpns l2tpns 1.1 升级程序： l2tpns l2tpns 1.1 l2tpns l2tpns-2.1.21.tar.gz http://downloads.sourceforge.net/l2tpns/l2tpns-2.1.21.tar.gz l2tpns l2tpns 2.0.13 l2tpns l2tpns-2.1.21.tar.gz...

Linux-HA Heartbeat Insecure Default Permissions on Shared Memory Vulnerability

No description provided by source. / Intruders Tiger Team Security http://www.intruders.org.br/ Heartbeat 2.0.6 Insecure Shared Memory - Local Denial of Service. Credits: Yan Rong Ge, see link below: http://secunia.com/advisories/21162/ Tested on Heartbeat 2.0.5. Thanks for Wendel Guglielmetti,...

Debian DSA-1151-1 : heartbeat - out-of-bounds read

Yan Rong Ge discovered out-of-boundary memory access in heartbeat, the subsystem for High-Availability Linux. This could be used by a remote attacker to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-1128-1 : heartbeat - permission error

Yan Rong Ge discovered that wrong permissions on a shared memory page in heartbeat, the subsystem for High-Availability Linux could be exploited by a local attacker to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

GLSA-200608-23 : Heartbeat: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200608-23 Heartbeat: Denial of Service Yan Rong Ge discovered that the peelnetstring function in clnetstring.c does not validate the 'length' parameter of user input, which can lead to an out-of-bounds memory access when processin...