kernel: KVM: x86 emulator: limit instructions to 15 bytes

The doinsnfetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service increased scheduling...

CVE-2008-6792

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully condu...

PT-2009-3441 · Linux +2 · Linux +2

Name of the Vulnerable Software and Affected Versions: NovaStor NovaNET version 12 Description: The issue is related to a stack-based buffer overflow in the DtbClsLogin function, allowing remote attackers to execute arbitrary code on Linux platforms or cause a denial of service on Windows platfor...

TFTP Packet Buffer Overflow

libcurl uses the given file part of a TFTP URL in a manner that allows a malicious user to overflow a heap-based memory buffer due to the lack of boundary check. This overflow happens if you pass in a URL with a TFTP protocol prefix "tftp://", using a valid host and a path part that is longer tha...

3cdaemon tftp server DOS vulnerability

AUTHOR: Fortinet, inc Ning Wangnwangatscncomcn DATE: 15/12/2004 PRODUCTS: 3cdaemon version 2.0 revision 10 Description: 3com product 3cdaemon is one of the most popular used tools to achieve files backup and upgrade. Detail: 3com tftp daemon exist a vulnerability, which will encounter a fatal err...

Microsoft Windows NT 4.02000 - NTFS File Hiding

Microsoft Windows NT 4.02000 - NTFS File Hiding source: https://www.securityfocus.com/bid/3989/info There exists a condition in Microsoft Windows operating systems using NTFS that may allow for files to be hidden. Though the NTFS filesystem allows for a 32000 character path, Microsoft Windows...

Dick Lin ZetaMail 2.1 - Login Denial of Service

Dick Lin ZetaMail 2.1 - Login Denial of Service source: https://www.securityfocus.com/bid/813/info The ZetaMail mail server will crash if a username/password pair longer than 3500 characters is supplied by the client. 19636-1.exe - binary for windows 19636-2.zip - source for windows 19636-3.tgz -...

ProFTPd 1.2 pre1pre2pre3pre4pre5 - Remote Buffer Overflow (2)

ProFTPd 1.2 pre1pre2pre3pre4pre5 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/612/info The vulnerability in 1.2pre1, 1.2pre3 and 1.2pre3 is a remotely exploitable buffer overflow, the result of a sprintf in the logxfer routine in src/log.c. The vulnerability in 1.2pre4 ...