Squid-3.3.5 DoS PoC

Squid Crash PoC Copyright C Kingcope 2013 tested against squid-3.3.5 this seems to be the patch for the vulnerability: http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch The squid-cache service will respawn, looks like a kind of assert exception: 2013/07/15 20:48:36 kid1| Closing HTTP...

Squid 3.3.5 Denial Of Service

Squid Crash PoC Copyright C Kingcope 2013 tested against squid-3.3.5 this seems to be the patch for the vulnerability: http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch The squid-cache service will respawn, looks like a kind of assert exception: 2013/07/15 20:48:36 kid1| Closing HTTP...

Squid 3.3.5 Denial Of Service Vulnerability

Squid version 3.3.5 remote denial of service crash exploit. Squid Crash PoC Copyright C Kingcope 2013 tested against squid-3.3.5 this seems to be the patch for the vulnerability: http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch The squid-cache service will respawn, looks like a kind o...

Baby FTP Server 1.24 - Denial of Service (1)

Baby FTP Server 1.24 - Denial of Service 1 !/usr/bin/perl Note from Exploit-DB thanks @wireghoul: This PoC only crashes the GUI for the application, not the server itself. Exploit Title: Baby FTP Server Version 1.24 Denial Of Service Date: 2013/6/25 Exploit Author: Chako Vendor Homepage:...

Baby FTP Server 1.24 - Denial of Service (1)

!/usr/bin/perl Note from Exploit-DB thanks @wireghoul: This PoC only crashes the GUI for the application, not the server itself. Exploit Title: Baby FTP Server Version 1.24 Denial Of Service Date: 2013/6/25 Exploit Author: Chako Vendor Homepage:...

kernel: kvm: out-of-bounds access in ioapic indirect register reads

The ioapicreadindirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPICREGSELECT and IOAPICREGWINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes several security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CVE-2013-1496

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498...

CVE-2013-1498

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1496...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498...

CVE-2013-1496

CVE-2013-1496 pertains to Solaris kernel/IO vulnerabilities in Oracle Sun Solaris 10 and 11. The connected Nessus entries identify affected platforms as Solaris 10/11 (x86 and SPARC) with exploitation requiring local access, potentially causing an OS hang or repeated crashes (complete DOS). Affec...

CVE-2013-1496

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498...

CVE-2013-1498

CVE-2013-1498 affects Oracle Sun Solaris 10/11 Kernel/IO. The Nessus entry indicates a Kernel/IO vulnerability exploitable with local access that can cause an OS hang or crash (complete DOS). Affected versions are Solaris 10/11; remediation appears via patch 149164-01 (as referenced in the Solari...

CVE-2013-1498

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1496...

CVE-2013-1496: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498...

CVE-2013-1498: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1496...

PT-2013-3180

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris versions 10 and 11 Description The issue affects the availability of the system and is related to Kernel/IO. It is a local issue, meaning it can be exploited by users with local access to the system. Recommendations For Orac...

PT-2013-3178

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris versions 10 and 11 Description The issue affects the availability of the system, related to Kernel/IO. It is a local issue, meaning it can be exploited by users with local access to the system. Recommendations For Oracle Sun...

KNet Web Server 1.04b - Stack Corruption Buffer Overflow

KNet Web Server 1.04b - Stack Corruption Buffer Overflow !/usr/bin/perl KNet Web Server Stack corruption BoF PoC Written by Wireghoul - http://www.justanotherhacker.com Date: 2013/04/11 Version: 1.04b Tested on: WinXP SP3 use IO::Socket::INET; $host = shift; $port = shift; print "KNet Web Server...

HP System Management Homepage iprange parameter command execution

Added: 04/12/2013 BID: 58817 OSVDB: 91812 Background HP System Management Homepage SMH is a web-based interface that consolidates the management of ProLiant and Integrity servers. Problem A vulnerability in HP SMH allows command execution when an attacker requests /proxy/DataValidation with a...