CVE-2006-7028

Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service console hang via a flood of small TCP/IP packets. NOTE: this issue has not been replicated by third parties. In addition, the cause is unknown, although it might be related to...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

MDKA-2006:014 : dynamic

Dynamic was not calling scripts correctly when hardware was plugged/unplugged. Plugging a digital camera not usb mass storage, like a Canon camera was not creating an icon on Desktop for GNOME or in the Devices window for KDE. Dynamic was also creating a 'pilot' symlink in / in addition to...

Microsoft Windows Shell vulnerable to privilege escalation

Overview A vulnerability in Microsoft Windows Shell may allow an attacker to gain access with escalated privileges. Description The Microsoft Windows Shell Hardware Detection service provides notification for AutoPlay hardware events. This service fails to properly validate a function parameter i...

Hardcoded credentials

The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."...

CVE-2007-0211

The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."...

CVE-2007-0211

The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."...

CVE-2007-0211

CVE-2007-0211 concerns a privilege-escalation vulnerability in the Windows Shell Hardware Detection component. The issue arises from an unvalidated parameter used during hardware detection and initialization, which could allow a local, authenticated user to gain complete control over the affected...

Microsoft Windows Shell Hardware Detection privilege escalation

Parameter of function executed during hardware detection is not validated...

Windows2000, blue screen of death stop information analysis-vulnerability warning-the black bar safety net

Windows2000 perhaps arguably a landmark of theoperating system, but it is still not able to avoid the blue screen of death Blue Screen of Death. The purpose of this article is the solution of the planing BSOD problem, but given how the process typically the blue screen problem solving steps...

InGate Firewall和SIParator认证中继绕过限制漏洞

BUGTRAQ ID: 22080 Ingate Firewall和SIParator都是企业级的硬件防火墙设备。 Ingate Firewall和SIParator的SIP模块存在访问认证处理错误，允许远程攻击者通过中继攻击绕过某些安全限制，获得非授权访问。 受影响系统： Ingate Firewall 4.5.1 Ingate SIParator 4.5.1 不受影响系统： Ingate Firewall 4.5.1 Ingate SIParator 4.5.1 厂商补丁： Ingate ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Vulnerability classification and to further explore-exploit warning-the black bar safety net

Vulnerability is a forever fairy tale. To achieve esque hero dream, to achieve to break the technological monopoly of the freedom blueprint, discover the vulnerability of the people, exploit the people, patching holes in people, like the vulnerability of people, afraid of the vulnerability of...

CVE-2006-6893

Removed by vendor...

CVE-2006-6893

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through 1 ICMP timestamps, 2 TCP sequence numbers, and 3 TCP timestamps, ...

Do a good Defense: virus destroy hardware there are seven large-loss trick-vulnerability warning-the black bar safety net

CIH virus has turned everyone's panic, set off no small waves. Previous various virus only up to destroy hard drive data, and CIH was able to invade the on-Board Flash BIOS, the destruction of its contents and to make the Board scrapped. CIH lesson tells us:do not despise viruses to hardware...

Cisco Secure Desktop SSL VPN会话多个信息泄露漏洞

Cisco Secure Desktop CSD可以通过加密降低远程用户注销或SSL VPN会话超时后cookies、浏览器历史记录、临时文件和下载内容在系统上所遗留的风险。 CSD的实现上存在如下一些问题，可能导致在SSL VPN会话相关的敏感信息泄露。 1. Windows页面文件信息泄露 由于Windows虚拟内存子系统运行的方式，任何应用程序所使用的虚拟物理内存，包括在Secure...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation

Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are...