[SA19017] FreeBSD "nfsd" NFS Mount Request Denial of Service

TITLE: FreeBSD "nfsd" NFS Mount Request Denial of Service SECUNIA ADVISORY ID: SA19017 VERIFY ADVISORY: http://secunia.com/advisories/19017/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: FreeBSD 6.x http://secunia.com/product/6778/ DESCRIPTION: Evgeny Legerov has...

FreeBSD 6.0 - nfsd Remote Kernel Panic (Denial of Service)

FreeBSD 6.0 - nfsd Remote Kernel Panic Denial of Service !/usr/bin/perl Saw an advisory on Dailydave and wrote a little script to check my freebsd boxes kind of evil. /str0ke milw0rm.com ProtoVer NFS testsuite 1.0 uncovered remote kernel panic vulnerability in FreeBSD 6.0 kernel. Evgeny Legerov...

FreeBSD 6.0 (nfsd) Remote Kernel Panic Denial of Service Exploit

No description provided by source. !/usr/bin/perl Saw an advisory on Dailydave and wrote a little script to check my freebsd boxes kind of evil. /str0ke milw0rm.com ProtoVer NFS testsuite 1.0 uncovered remote kernel panic vulnerability in FreeBSD 6.0 kernel. Evgeny Legerov www.gleg.net use...

FreeBSD 6.0 - 'nfsd' Remote Kernel Panic (Denial of Service)

!/usr/bin/perl Saw an advisory on Dailydave and wrote a little script to check my freebsd boxes kind of evil. /str0ke milw0rm.com ProtoVer NFS testsuite 1.0 uncovered remote kernel panic vulnerability in FreeBSD 6.0 kernel. Evgeny Legerov www.gleg.net use IO::Socket; sub usage print "FreeBSD 6.0...

FreeBSD 6.0 (nfsd) Remote Kernel Panic Denial of Service Exploit

Exploit for bsd platform in category dos / poc ================================================================ FreeBSD 6.0 nfsd Remote Kernel Panic Denial of Service Exploit ================================================================ !/usr/bin/perl Saw an advisory on Dailydave and wrote a...

security flaw

Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VMIO flag, which causes incorrect reference counts and may lead to a denial of service kernel panic when accessing freed kernel pages...

Ubuntu 4.10 / 5.04 : linux-source-2.6.10, linux-source-2.6.8.1 vulnerabilities (USN-178-1)

Oleg Nesterov discovered a local Denial of Service vulnerability in the timer handling. When a non group-leader thread called exec to execute a different program while an itimer was pending, the timer expiry would signal the old group leader task, which did not exist any more. This caused a kerne...

Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-38-1)

CAN-2004-0814 : Vitaly V. Bursov discovered a Denial of Service vulnerability in the 'serio' code; opening the same tty device twice and doing some particular operations on it caused a kernel panic and/or a system lockup. Fixing this vulnerability required a change in the Application Binary...

CVE-2005-3358: Undefined Security Weakness

Linux kernel before 2.6.15 allows local users to cause a denial of service panic via a setmempolicy call with a 0 bitmask, which causes a panic when a page fault occurs...

CVE-2002-2197

CVE-2002-2197 affects Sun Solaris 8.0. A local user can trigger a kernel panic by running a program that uses /dev/poll, causing a NULL pointer dereference in the kernel. The provided connected documents confirm the vulnerable component and the root cause (NULL pointer dereference via /dev/poll),...

CVE-2002-2197: Undefined Security Weakness

Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service kernel panic via a program that uses /dev/poll, triggering a NULL pointer dereference...

CVE-2005-2708: Undefined Security Weakness

The searchbinaryhandler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service panic, as demonstrated by running a process using the bash ulimi...

CVE-2005-3238: Undefined Security Weakness

Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service panic via unspecified attack vectors...

security flaw

The iptrecent kernel module iptrecent.c in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service kernel panic via certain attacks such as SSH brute force, which leads to memset calls using a length based on the uint32t...

security flaw

Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs...

CVE-2005-1913

CVE-2005-1913 affects the Linux kernel up to version 2.6.12.1. The vulnerability occurs when a non group-leader thread executes a different program while an itimer is pending; the expiry signal is delivered to the old group-leader task, which no longer exists, causing a kernel panic (local DoS). ...

CVE-2005-1913: Undefined Security Weakness

The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service kernel panic via a non group-leader thread executing a different program than was pending in itimer, which causes the signal to be delivered to the old group-leader task, which does not exist...

USN-178-1: Linux kernel vulnerabilities

Oleg Nesterov discovered a local Denial of Service vulnerability in the timer handling. When a non group-leader thread called exec to execute a different program while an itimer was pending, the timer expiry would signal the old group leader task, which did not exist any more. This caused a kerne...

CVE-2005-2872: Undefined Security Weakness

The iptrecent kernel module iptrecent.c in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service kernel panic via certain attacks such as SSH brute force, which leads to memset calls using a length based on the uint32t...

CVE-2005-1768: Undefined Security Weakness

Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs...