FreeBSD -- Lost mbuf flag resulting in data corruption

Problem Description: The read-only flag is not correctly copied when a mbuf buffer reference is duplicated. When the sendfile2 system call is used to transmit data over the loopback interface, this can result in the backing pages for the transmitted file being modified, causing data corruption...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 23rd February 2010 This update adds references to two KBase articles...

MDVA-2008:168 : sound-scripts

The sound initialization scripts provided with Mandriva Linux 2009 activate the Analog Loopback channel when it is present. This channel is present on most audio chipsets supported by the snd-hda-intel driver, which are commonly used on recent systems. When active, this channel plays back the sou...

Mandriva Update for sound-scripts MDVA-2008:168 (sound-scripts)

Check for the Version of sound-scripts OpenVAS Vulnerability Test Mandriva Update for sound-scripts MDVA-2008:168 sound-scripts Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Cisco Catalist loopback address access protection bypass

SNMP access by address 127.0.0.x is possible, making it possible to bypass IP filtering...

[Full-disclosure] CAT6500 accessible via 127.0.0.x loopback addresses

Lee E Rian/TCO/HQ/BOC wrote on 08/29/2006 01:49:40 PM: I found something interesting w/ the cat6000s - telnet 127.0.0.11 gets you into the switch & telnet 127.0.0.12 gets you into the router snmpget 127.0.0.11 sysDescr.0 RFC1213-MIB::sysDescr.0 = STRING: "Cisco Systems WS-C6509.Cisco Catalyst...

Cisco IOS on Catalyst 6500 and Cisco 7600 Access Control List Bypass Vulnerability

Cisco IOS running on Catalyst 6500 and Cisco 7600 contains a vulnerability that could allow an unauthenticated, remote attacker to bypass configured ACLs. The vulnerability exists because the affected devices accept traffic to IP addresses that are reserved for use by the Ethernet Out-of-Band...

Fedora Core 6 : ipsec-tools-0.6.5-8.fc6 (2007-665)

Mon Apr 23 2007 Steve Grubb - 0.6.5-8 - Upstream fix for Racoon DOS, informational delete must be encrypted - Resolves: rhbz235388 - CVE-2007-1841 ipsec-tools racoon DoS - Fri Apr 20 2007 Steve Grubb - 0.6.5-7 - Resolves: 218386 labeled ipsec does not work over loopback - Mon Apr 16 2007 Steve...

CVE-2007-3533

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

CVE-2007-3533

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

CVE-2007-3533: Undefined Security Weakness

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

Code injection

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

CVE-2007-3469

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

CVE-2007-3469

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

CVE-2007-3469

CVE-2007-3469 affects Sun Solaris 10: a vulnerability in the TCP Loopback/Fusion implementation that allows local users to cause a denial of service (resource exhaustion and service hang) via unspecified vectors. The vulnerability is local and requires no authentication. Publicly linked patch ref...

CVE-2007-3469: Undefined Security Weakness

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

Sun Solaris Loopback文件系统本地拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris Loopback文件系统存在安全问题，本地攻击者可以利用漏洞删除或者重命名文件。 在非全局域中的本地特权用户可以删除或重命名只读挂接的loopback文件系统中的文件。此文件系统与全局域共享，可导致全局域中的文件删除。 Sun Solaris 10.0 x86 Sun Solaris 10 补丁下载： Sun Solaris 10.0 x86 Sun 118855-28 http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=118855-28&method=h...

Sun Solaris Loopback Filesystem protection bypass

Users can rename and delete files in read-only file system...

CVE-2007-0668

The Loopback Filesystem LOFS in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service...

CVE-2007-0668: Undefined Security Weakness

The Loopback Filesystem LOFS in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service...