CVE-2011-1652

CVE-2011-1652 concerns Windows 7 default behavior: upon IPv6 Router Advertisement, the system prefers a new IPv6/DHCPv6 path over existing IPv4/DHCPv4 and provides no option to ignore an unexpected RA. This enables remote attackers on the local network to perform man-in-the-middle attacks on traf...

PT-2011-3266 · Microsoft · Windows 7

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 7 affected versions not specified Description: The default configuration of Microsoft Windows 7 prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement...

Linux Kernel < 2.6.37-rc2 - 'TCP_MAXSEG' Kernel Panic (Denial of Service) (2)

/ TCPMAXSEG Kernel Panic DoS for Linux include include include include include int main struct sockaddrin laddr; memset&laddr, 0, sizeofladdr; laddr.sinfamily = AFINET; laddr.sinaddr.saddr = inetaddr"127.0.0.1"; laddr.sinport = htons31337; int listener = socketPFINET, SOCKSTREAM, IPPROTOTCP; if...

Ubuntu Update for linux vulnerabilities USN-1081-1

Ubuntu Update for Linux kernel vulnerabilities USN-1081-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10811.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux vulnerabilities USN-1081-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

dns-brute NSE Script

Attempts to enumerate DNS hostnames by brute force guessing of common subdomains. With the dns-brute.srv argument, dns-brute will also try to enumerate common DNS SRV records. Wildcard records are listed as "A" and "AAAA" for IPv4 and IPv6 respectively. See also: dns-nsec3-enum.nse...

USN-1080-2: Linux kernel vulnerabilities

Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...

USN-1081-1: Linux kernel vulnerabilities

It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-3698 Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could...

Ubuntu 10.10 : linux vulnerabilities (USN-1081-1)

It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-3698 Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could...

Ubuntu 8.04 LTS : linux vulnerabilities (USN-1072-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dave Chinner discovered that the XFS filesystem did not correctly order...

Mandriva Update for avahi MDVSA-2011:037 (avahi)

Check for the Version of avahi OpenVAS Vulnerability Test Mandriva Update for avahi MDVSA-2011:037 avahi Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

USN-1073-1: Linux kernel vulnerabilities

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Jacobson discovered that ThinkPad video output was not correctly...

USN-1071-1: Linux kernel vulnerabilities

Tavis Ormandy discovered that the Linux kernel did not properly implement exception fixup. A local attacker could exploit this to crash the kernel, leading to a denial of service. CVE-2010-3086 Dan Rosenberg discovered that the Linux kernel TIPC implementation contained multiple integer signednes...

Air Files v2.6 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Air Files v2.6 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, Sunlight, email protected Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id339732484?mt=8...

Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, email protected, Sunlight, email protected Software Link :...

Share v1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Share v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, Sunlight, email protected Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350671847?mt=8...

CVE-2011-1002

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service infinite loop via an empty mDNS 1 IPv4 or 2 IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244...

The End of the Internet in this week !

You may accept heard that the Internet ran out of IP addresses this week, a after crisis sometimes compared to all the Y2K agitation that accompanied the accession of the year 2000. Actually, this is alone the alpha of the end for the Internet as we apperceive it. And as with Y2K, alarms are...

Amazon Web Hosting Company Is now Hosting DNS Service !

Web hosting company has announced that Amazon would have access to the Domain Name System DNS services, the game will give the DNS hosting as well. Thus, Route 53 will become part of the web hosting, pay-as-you-go DNS hosting service, which pays the amount of DNS issues can be resolved. DNS is th...

CVE-2010-3880: Loop with Unreachable Exit Condition

net/ipv4/inetdiag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INETDIAG bytecode, which allows local users to cause a denial of service kernel infinite loop via crafted INETDIAGREQBYTECODE instructions in a netlink message that contains multiple attribute elements, as...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 2838 / 2841 / 2842)

The SUSE Linux Enterprise 11 Kernel was updated fixing a single regression : The previous update contained an erronous fix which broke the IPv4 GRE tunneling module. This regression is fixed by this update. No other change is contained in this update, if you are not using the module, this update ...