USN-1080-1: Linux kernel vulnerabilities

Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...

Ubuntu 9.10 : linux, linux-ec2 vulnerabilities (USN-1073-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Jacobson discovered that ThinkPad video output was not correctly...

USN-1074-2: Linux kernel vulnerabilities

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service...

USN-1073-1: Linux kernel vulnerabilities

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Jacobson discovered that ThinkPad video output was not correctly...

Microsoft Windows SMB mrxsmb.sys Remote Heap Overflow (CVE-2011-0654)

A heap buffer overflow vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote attacker may exploit this vulnerability to create a denial of service...

Microsoft Warns of MHTML Bug in Windows

Microsoft is warning its users about a dangerous flaw in the way that Windows handles certain MHTML operations, which could allow an attacker to run code on vulnerable machines. The bug affects all of the current versions of Windows, from XP up through Windows 7 and Windows Server 2008. Microsoft...

hplip: remote stack overflow vulnerability

Stack-based buffer overflow in the hpmudgetpml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing HPLIP 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SNMP respons...

[SECURITY] [DSA-2127-1] New wireshark packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2127-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 28, 2010 http://www.debian.org/security/faq -...

DSA-2127-1 wireshark - denial of service

Bulletin has no description...

Wireshark 1.4.2 & Wireshark 1.2.13 - new version released !

"Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education." The following protocols have been updated – AgentX, ANCP, DIAMETER, HTTP, IP, LDSS, MIME, NBNS, PROFINET, SIP, TCP, Telnet, ZigBee. This update also fixes many...

RedHat Update for mysql RHSA-2010:0824-01

Check for the Version of mysql OpenVAS Vulnerability Test RedHat Update for mysql RHSA-2010:0824-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

mysql security update

CentOS Errata and Security Advisory CESA-2010:0824 Updated mysql packages that fix three security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

RHEL 4 : mysql (RHSA-2010:0824)

Updated mysql packages that fix three security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Ethereal-Network Peotocol Analyzer v099.0 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================================== Ethereal-Network Peotocol Analyzer v099.0 DLL Hijacking Exploit ===============================================================...

Ubuntu: Security Advisory (USN-1000-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : linux, linux-ec2, linux-source-2.6.15 vulnerabilities (USN-1000-1)

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Al Viro discovered a race condition in the TTY driver. A local attacker could exploit this to crash the system, leading to a...

{PRL} Microsoft Windows Outlook Express and Windows Mail Integer Overflow

Application: Microsoft Outlook Express Microsoft Windows Mail Platforms: Windows 2000 Windows XP Windows Vista Windows server 2003 Windows Server 2008 SR2 Exploitation: Remote Exploitable CVE Number: CVE-2010-0816 Discover Date: 2009-09-11 Author: Francis Provencher Protek Research Lab's Website:...

Alert Standard Format / Remote Management and Control Protocol Detection

Binary data asfrmcpdetect.nbin...

PT-2010-2042 · Microsoft · Windows Server 2008 +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions Gold, SP1, and SP2 Microsoft Windows Server 2008 versions Gold and SP2 Description: A denial of service issue exists due to an error in TCP/IP processing when handling specially crafted TCP packets with a...

Linux Kernel 'rds_recvmsg()' Function Local Information Disclosure Vulnerability

Exploit for linux platform in category local exploits / rdsclient.c / int mainvoid int sockfd; struct sockaddrin serverAddr; struct sockaddrin toAddr; char recvBuffer128 = "data from client"; struct msghdr msg; struct iovec iov; sockfd = socketAFRDS, SOCKSEQPACKET, 0; if sockfd iovbase =...