Code injection

Unspecified vulnerability in the embedded service processor SP before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy...

CVE-2007-5170

Unspecified vulnerability in the embedded service processor SP before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy...

CVE-2007-5170

Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) before firmware 3.09 contain an unspecified vulnerability that allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy. The description is explicit but does not provide exploit vectors, affected compo...

CVE-2007-5170

Unspecified vulnerability in the embedded service processor SP before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy...

Cisco Adaptive Security Appliance insecurely logs passwords

Overview The Cisco Adaptive Security Appliance ASA firewall may log user credentials, including passwords, as plain text when AAA authentication is enabled. Description The Cisco Adapative Security Appliance ASA is a firewall with Intrusion Protection System IPS, Stateful Packet Inspection SPI, a...

USN-510-1: Linux kernel vulnerabilities

A flaw was discovered in the PPP over Ethernet implementation. Local attackers could manipulate ioctls and cause kernel memory consumption leading to a denial of service. CVE-2007-2525 An integer underflow was discovered in the cpuset filesystem. If mounted, local attackers could obtain kernel...

CVE-2007-4626

Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service daemon crash via certain network traffic associated with entities larger than 2 Gb...

CVE-2007-4626

Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service daemon crash via certain network traffic associated with entities larger than 2 Gb...

Code injection

Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service daemon crash via certain network traffic associated with entities larger than 2 Gb...

CVE-2007-4626

Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service daemon crash via certain network traffic associated with entities larger than 2 Gb...

CVE-2007-4626

Removed by vendor...

Design/Logic Flaw

Unspecified vulnerability in Dell Remote Access Card 4 DRAC4 with firmware 1.50 Build 02.16 allows remote attackers to cause a denial of service SSH daemon crash via certain network traffic, as demonstrated by an "nmap -O" scan with nmap 4.03, possibly related to a Mocana Mocanada SSH vulnerabili...

CVE-2007-3843

The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request...

Cross site request forgery (csrf)

The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request...

CVE-2007-3843

The CVE-2007-3843 issue affects the Linux kernel (pre-2.6.23-rc1) CIFS handling: the mount option sec= is checked against the wrong global variable, which could allow remote attackers to spoof CIFS network traffic intended to be signed with security signatures (e.g., lack of signing despite sec=n...

CVE-2007-4243

Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway ASG 7 allows remote attackers to cause a denial of service CPU consumption via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data...

CVE-2007-4243

CVE-2007-4243 affects Astaro Security Gateway (ASG) 7, via a flaw in pfilter-reporter.pl that can cause a denial of service by consuming CPU when handling certain network traffic. Public demonstrations referenced P2P and iTunes traffic consuming large data volumes. Multiple connected sources reaf...

[SECURITY] Fedora Core 6 Update: tcpdump-3.9.4-11.fc6

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...

[SECURITY] Fedora 7 Update: tcpdump-3.9.7-1.fc7

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...

tcpdump: Integer overflow

Background tcpdump is a tool for capturing and inspecting network traffic. Description mu-b from Digital Labs discovered that the return value of a snprintf call is not properly checked before being used. This could lead to an integer overflow. Impact A remote attacker could send specially crafte...