Predictable TCP ISN in Packeteer PacketShaper

Predictable TCP ISN in Packeteer PacketShaper Critical: Less critical Impact: Connection spoofing, DoS Where: Local network Product: Packeteer PacketShaper http://www.packetshaper.com/ Description: The TCP/IP stack of Packeteer PacketShaper is generating predictable initial sequence numbers ISN:...

CVE-2007-2037

Cisco Wireless LAN Controller WLC before 3.2.116.21, and 4.0.x before 4.0.155.0, allows remote attackers on a local network to cause a denial of service device crash via malformed Ethernet traffic...

Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability

Cisco Catalyst 6500 series systems that are running certain versions of Cisco Internetwork Operating System IOS are vulnerable to an attack from a Multi Protocol Label Switching MPLS packet. Only the systems that are running in Hybrid Mode Catalyst OS CatOS software on the Supervisor Engine and I...

Intel® Enterprise Southbridge 2 Baseboard Management Controller Denial of Service

Summary: A denial of service vulnerability exists in the Intel® Enterprise Southbridge 2 Baseboard Management Controller which may allow malicious users to connect to a server system within a local area network and issue any Intelligent Platform Management Interface command. If proper external...

[SA23700] Sun Solaris rpcbind Denial of Service

TITLE: Sun Solaris rpcbind Denial of Service SECUNIA ADVISORY ID: SA23700 VERIFY ADVISORY: http://secunia.com/advisories/23700/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/ Sun Solaris 8 http://secunia.com/product/94/...

[SECURITY] Fedora Core 5 Update: avahi-0.6.11-3.fc5

Avahi is a system which facilitates service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is alread...

Firewalls for local network

Firewalls for local network Sergey V. Gordeychik, [email protected] Installation of a firewall is the basic requirement for building a secured network. Years of their existence made firewalls more functional and more secured and developed them from simple packet filters into devices with...

[SA22041] Fi Win WiFi Phone SS28S Debug Console Security Issue

---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...

CVE-2006-4982

Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address o...

CVE-2006-4982: Undefined Security Weakness

Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address o...

[SA21854] TFTP Server TFTPDWIN Buffer Overflow Vulnerability

TITLE: TFTP Server TFTPDWIN Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA21854 VERIFY ADVISORY: http://secunia.com/advisories/21854/ CRITICAL: Moderately critical IMPACT: System access WHERE: From local network SOFTWARE: TFTP Server TFTPDWIN 0.x http://secunia.com/product/11921/...

Cisco IOS VTP Malformed Version Denial of Service Vulnerability

Cisco IOS contains a vulnerability in the VLAN Trunking Protocol VTP that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability exists because the VTP feature in several versions of Cisco IOS software does not properly handle malformed packe...

[SA20267] Apple Xcode WebObjects Plugin Access Control Vulnerability

TITLE: Apple Xcode WebObjects Plugin Access Control Vulnerability SECUNIA ADVISORY ID: SA20267 VERIFY ADVISORY: http://secunia.com/advisories/20267/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: Apple Xcode 2.x http://secunia.com/product/10144/ DESCRIPTION: A...

[SA20144] Sun Java System Directory Server Authentication Bypass

TITLE: Sun Java System Directory Server Authentication Bypass SECUNIA ADVISORY ID: SA20144 VERIFY ADVISORY: http://secunia.com/advisories/20144/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: Sun Java System Directory Server 5.x...

[SA19017] FreeBSD "nfsd" NFS Mount Request Denial of Service

TITLE: FreeBSD "nfsd" NFS Mount Request Denial of Service SECUNIA ADVISORY ID: SA19017 VERIFY ADVISORY: http://secunia.com/advisories/19017/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: FreeBSD 6.x http://secunia.com/product/6778/ DESCRIPTION: Evgeny Legerov has...

[SA18779] IBM Tivoli Directory Server LDAP Denial of Service

TITLE: IBM Tivoli Directory Server LDAP Denial of Service SECUNIA ADVISORY ID: SA18779 VERIFY ADVISORY: http://secunia.com/advisories/18779/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: IBM Tivoli Directory Server 6.x http://secunia.com/product/6075/ DESCRIPTION: Evgeny...

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)

/ Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit by bratax http://www.bratax.be/ - greets to: all my miffm00f buddies, BuzzDee and everyone else I forgot who should be in here - thx to: Curt Wilson @ SIUC maybe you don't know why but this exploit wouldn't exist if we didn't have...

[SA18689] Symantec Sygate Management Server SQL Injection

TITLE: Symantec Sygate Management Server SQL Injection SECUNIA ADVISORY ID: SA18689 VERIFY ADVISORY: http://secunia.com/advisories/18689/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From local network SOFTWARE: Sygate Secure Enterprise 3.x...

CVE-2006-0340: Improper Input Validation

Unspecified vulnerability in Stack Group Bidding Protocol SGBP support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service device hang and network traffic loss via a crafted UDP packet to...

CVE-2006-0309: Undefined Security Weakness

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length...