MDVA-2008:168 : sound-scripts

The sound initialization scripts provided with Mandriva Linux 2009 activate the Analog Loopback channel when it is present. This channel is present on most audio chipsets supported by the snd-hda-intel driver, which are commonly used on recent systems. When active, this channel plays back the sou...

Mandriva Update for sound-scripts MDVA-2008:168 (sound-scripts)

Check for the Version of sound-scripts OpenVAS Vulnerability Test Mandriva Update for sound-scripts MDVA-2008:168 sound-scripts Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

[Full-disclosure] CAT6500 accessible via 127.0.0.x loopback addresses

Lee E Rian/TCO/HQ/BOC wrote on 08/29/2006 01:49:40 PM: I found something interesting w/ the cat6000s - telnet 127.0.0.11 gets you into the switch & telnet 127.0.0.12 gets you into the router snmpget 127.0.0.11 sysDescr.0 RFC1213-MIB::sysDescr.0 = STRING: "Cisco Systems WS-C6509.Cisco Catalyst...

Cisco Catalist loopback address access protection bypass

SNMP access by address 127.0.0.x is possible, making it possible to bypass IP filtering...

Cisco IOS on Catalyst 6500 and Cisco 7600 Access Control List Bypass Vulnerability

Cisco IOS running on Catalyst 6500 and Cisco 7600 contains a vulnerability that could allow an unauthenticated, remote attacker to bypass configured ACLs. The vulnerability exists because the affected devices accept traffic to IP addresses that are reserved for use by the Ethernet Out-of-Band...

Fedora Core 6 : ipsec-tools-0.6.5-8.fc6 (2007-665)

Mon Apr 23 2007 Steve Grubb - 0.6.5-8 - Upstream fix for Racoon DOS, informational delete must be encrypted - Resolves: rhbz235388 - CVE-2007-1841 ipsec-tools racoon DoS - Fri Apr 20 2007 Steve Grubb - 0.6.5-7 - Resolves: 218386 labeled ipsec does not work over loopback - Mon Apr 16 2007 Steve...

CVE-2007-3533

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

CVE-2007-3533

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...

CVE-2007-3469

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

Code injection

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

CVE-2007-3469

CVE-2007-3469 affects Sun Solaris 10: a vulnerability in the TCP Loopback/Fusion implementation that allows local users to cause a denial of service (resource exhaustion and service hang) via unspecified vectors. The vulnerability is local and requires no authentication. Publicly linked patch ref...

CVE-2007-3469

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

Sun Solaris Loopback文件系统本地拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris Loopback文件系统存在安全问题，本地攻击者可以利用漏洞删除或者重命名文件。 在非全局域中的本地特权用户可以删除或重命名只读挂接的loopback文件系统中的文件。此文件系统与全局域共享，可导致全局域中的文件删除。 Sun Solaris 10.0 x86 Sun Solaris 10 补丁下载： Sun Solaris 10.0 x86 Sun 118855-28 http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=118855-28&method=h...

Sun Solaris Loopback Filesystem protection bypass

Users can rename and delete files in read-only file system...

CVE-2007-0668

The Loopback Filesystem LOFS in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service...

Microsoft IPv6 TCP/IP Loopback LAND攻击拒绝服务(MS05-019/MS06-064)

Microsoft Windows是微软发布的非常流行的操作系统。 关闭了Windows防火墙的Windows Server 2003和XP SP2受LAND攻击的影响。攻击者可以发送设置了SYN标记的TCP报文，将源IP地址和目标IP地址及源端口和目标端口都设置为目标机器，导致15-30秒的DoS情况。 向文件服务器发送单个LAND报文就可能导致当前连接到服务器上所有工作站的Windows explorer僵死，服务器的CPU使用率达到100%。有时有漏洞服务器上的网络监控甚至无法嗅探的出恶意的报文。使用tcpreplay重现攻击可以导致网络完全瘫痪。 Microsoft Window...

CVE-2006-5396

The tcpfusercvdrain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service system crash via a TCP loopback connection with both endpoints on the same system...

gld -- format string and buffer overflow vulnerabilities

Gld has been found vulnerable to multiple buffer overflows as well as multiple format string vulnerabilities. An attacker could exploit this vulnerability to execute arbitrary code with the permissions of the user running Gld, the default user being root. The FreeBSD port defaults to running gld ...

CVE-2003-0415

Remote PC Access Server 2.2 allows remote attackers to cause a denial of service crash by receiving packets from the server and sending them back to the server...

Eggdrop arbitrary connection vulnerability

Hi, there is a serious security problem in the popular eggdrop IRCbot. The hole allows a regular user with enough 'power' at least power to add new bot records to use any linked instance of the bot on the botnet as an instant 'proxy'. The following session demonstrates the problem with an...