EUVD-2009-0222

Malware in sbrugna...

Microsoft Windows Kernel - IOCTL 0x120007 (NsiGetParameter) nsiproxy/netio Pool Memory Disclosure

Exploit for windows platform in category dos / poc / We have discovered that the handler of the 0x120007 IOCTL in nsiproxy.sys \.\Nsi device discloses portions of uninitialized pool memory to user-mode clients, likely due to output structure alignment holes. On our test Windows 7 32-bit...

Microsoft Windows Kernel - 'IOCTL 0x120007 NsiGetParameter' nsiproxy/netio Pool Memory Disclosure

/ We have discovered that the handler of the 0x120007 IOCTL in nsiproxy.sys \.\Nsi device discloses portions of uninitialized pool memory to user-mode clients, likely due to output structure alignment holes. On our test Windows 7 32-bit workstation, an example layout of the output buffer is as...

Code injection

The NETIO and IPV4IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service CPU consumption via crafted network traffic, aka Bug ID CSCti59888...

CVE-2011-3295: Improper Input Validation

The NETIO and IPV4IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service CPU consumption via crafted network traffic, aka Bug ID CSCti59888...

CVE-2011-0943: Undefined Security Weakness

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service NetIO process restart or device reload via a crafted IPv4 packet, aka Bug ID CSCth44147...

Cisco Security Advisory: Cisco IOS XR Software IP Packet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS XR Software IP Packet Vulnerability Advisory ID: cisco-sa-20110525-iosxr Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT +--------------------------------------------------------- Summary ======= Cisco IOS...

DEBIAN-CVE-2010-4221

Multiple stack-based buffer overflows in the prnetiotelnetgets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a 1 FTP or 2 FTPS server...

PT-2010-5369

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.3c Description The issue involves multiple stack-based buffer overflows in the pr netio telnet gets function, allowing remote attackers to execute arbitrary code. This can be achieved by sending vectors involving ...

CVE-2009-0213

Unspecified vulnerability in the NETIO application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service system crash via unknown vectors, aka PD32021...

Code injection

Unspecified vulnerability in the NETIO application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service system crash via unknown vectors, aka PD32021...

CVE-2009-0213

Unspecified vulnerability in the NETIO application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service system crash via unknown vectors, aka PD32021...

CVE-2009-0213

AREVA e-terrahabitat NETIO component in version 5.7 and earlier is affected by a remote Denial of Service vulnerability (PD32021). Exploitation could crash the system; vendor patch exists (e-terrahabitat 5.6.x patch) and guidance recommends applying the security patch 560 (P20081030) or upgrading...

CVE-2009-0213: Undefined Security Weakness

Unspecified vulnerability in the NETIO application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service system crash via unknown vectors, aka PD32021...