dbus: Local DoS via messages with non-native byte order

The dbusheaderbyteswap function in dbus-marshal-header.c in D-Bus aka DBus 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service connection loss, obtain potentially sensitive...

Java RMI Server Insecure Default Configuration Java Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Java RMI Server Insecure Default...

PT-2011-1152 · Freedesktop.Org +1 · D-Bus +1

Name of the Vulnerable Software and Affected Versions: D-Bus versions 1.2.x through 1.2.27 D-Bus versions 1.4.x through 1.4.11 D-Bus versions 1.5.x through 1.5.3 Description: The issue concerns a problem with handling non-native byte order in the dbus header byteswap function, which can be...

Ubuntu 10.04 LTS : linux, linux-ec2 vulnerabilities (USN-1141-1)

Brad Spengler discovered that the kernel did not correctly account for userspace memory allocations during exec calls. A local attacker could exploit this to consume all system memory, leading to a denial of service. CVE-2010-4243 Alexander Duyck discovered that the Intel Gigabit Ethernet driver...

Ubuntu 8.04 LTS : linux vulnerabilities (USN-1146-1)

Kees Cook discovered that some ethtool functions did not correctly clear heap memory. A local attacker with CAPNETADMIN privileges could exploit this to read portions of kernel heap memory, leading to a loss of privacy. CVE-2010-4655 Kees Cook discovered that the IOWarrior USB device driver did n...

USN-1146-1: Linux kernel vulnerabilities

Kees Cook discovered that some ethtool functions did not correctly clear heap memory. A local attacker with CAPNETADMIN privileges could exploit this to read portions of kernel heap memory, leading to a loss of privacy. CVE-2010-4655 Kees Cook discovered that the IOWarrior USB device driver did n...

[USN-1141-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1141-1 May 31, 2011 linux, linux-ec2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...

PT-2011-3031

Name of the Vulnerable Software and Affected Versions Almost Native Graphics Layer Engine ANGLE versions prior to the fixed version Mozilla Firefox versions prior to 4.0.1 Google Chrome versions prior to 10.0.648.205 Description The issue allows remote attackers to execute arbitrary code via...

libvirt: several API calls do not honour read-only connection

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service host OS crash or possibly execute arbitrary code via a 1 virNodeDeviceDettach, 2 virNodeDeviceReset, 3 virDomainRevertToSnapsho...

CVE-2009-5061

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to cause a denial of service daemon crash by going offline, aka SPR MLZG7UPB9N...

CVE-2009-5061

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to cause a denial of service daemon crash by going offline, aka SPR MLZG7UPB9N...

Authentication flaw

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to cause a denial of service daemon crash by going offline, aka SPR MLZG7UPB9N...

PT-2011-1322

Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr version 8.1 before 8.1.0.14 Description The issue might allow remote authenticated users to cause a denial of service, resulting in a daemon crash, when the user goes offline and Domino Native Authentication is enabled...

CVE-2009-5061: Undefined Security Weakness

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to cause a denial of service daemon crash by going offline, aka SPR MLZG7UPB9N...

CVE-2011-0712

Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to 1 the sndusbcaiaqaudioinit...

CVE-2011-0712

Technical details about CVE-2011-0712 are not publicly provided in the supplied documents. Monitor for updates in connected advisories; no confirmed affected products, versions, or fixes are stated here.

PT-2011-2577

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc4-next-20110215 Description The issue is related to multiple buffer overflows in the caiaq Native Instruments USB audio functionality. This could potentially allow attackers to cause a denial of service ...

Native Instruments Traktor Pro 1.2.6 Stack-based Buffer Overflow

Exploit for windows platform in category dos / poc ================================================================ Native Instruments Traktor Pro 1.2.6 Stack-based Buffer Overflow ================================================================ !/usr/local/bin/perl Native Instruments Traktor Pro...

Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free

Exploit for windows platform in category dos / poc ================================================================= Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free ================================================================= !/usr/bin/perl Title: Native Instruments Massive...

Native Instruments Service Center 2.2.5 Local Privilege Escalation

Exploit for windows platform in category local exploits ================================================================== Native Instruments Service Center 2.2.5 Local Privilege Escalation ================================================================== Vendor: Native Instruments GmbH Product...