CVE-2010-3696

The frdhcpdecode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent Information option, which allows remote attackers to cause a denial of service infinite loop and daemon outage via a packet that has more than one sub-option...

CVE-2010-3697

The waitforchildtodie function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service daemon crash by sending many requests...

The Five Key Things to Know About the Security of Your Networking Gear

Measuring the performance and security of your network equipment has never been more important than it is today. While there will always be tradeoffs between maximum throughput and maximum security, I want to emphasize the “and” in “performance and security.” Your devices must perform while...

CVE-2010-2811

CVE-2010-2811 affects Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2. Root cause: VDSM does not properly accept TCP connections for SSL sessions, enabling remote attackers to cause a denial-of-service (daemon outage) via crafted SSL traffic. Public reference...

CVE-2010-2227

CVE-2010-2227 : Apache Tomcat versions 5.5.0–5.5.29, 6.0.0–6.0.27, and 7.0.0 beta are affected by improper handling of an invalid Transfer-Encoding header, which can cause a denial of service (outage) or information leakage via a crafted header that interferes with recycling of a buffer. The conn...

CVE-2010-1612

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service interface outage...

CVE-2009-4753

The CVE-2009-4753 issue affects the Addonics NAS Adapter NASU2FW41 (loader 1.17) FTP server. It arises from buffer overflows in the FTP service when processing long arguments for XRMD, DELETE, RNFR, and RNTO commands, leading to a denial of service (TCP/IP outage). Documents identify the affected...

Design/Logic Flaw

The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser and inkjet printers and MarkNet devices allows remote attackers to cause a denial of service TCP outage by making many passive FTP connections and...

CVE-2010-0618

The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser and inkjet printers and MarkNet devices allows remote attackers to cause a denial of service TCP outage by making many passive FTP connections and...

Design/Logic Flaw

The approxyajprequest function in modproxyajp.c in modproxyajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service backend server outage via a crafted request,...

Null pointer dereference

The Key Distribution Center KDC in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service NULL pointer dereference and domain controll...

CVE-2010-0035

CVE-2010-0035 describes a denial-of-service vulnerability in the Kerberos Key Distribution Center (KDC) on Windows servers (Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold/SP2) when a trust with a non-Windows Kerberos realm exists. The issue arises from improper handling of Ticket-Grantin...

kernel: rt_cache leak leads to lack of network connectivity

The icmpsend function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache aka DST in some situations involving transmission of an ICMP Host Unreachable message, which allows remo...

CVE-2009-4537

drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to 1 cause a denial of service temporary network outage via a packet with a crafted size, in conjunction with...

FreeBSD ZFS ZIL不安全文件权限漏洞

Bugraq ID: 37657 FreeBSD是一款基于BSD的操作系统。 FreeBSD ZFS存在安全漏洞，本地攻击者可以利用漏洞获得敏感信息或提升特权。 当重播setattr事务时，重播代码默认会以不安全的权限设置属性，当记录这些事务信息时没有再次更改这些属性。 系统崩溃或掉电等情况下会把部分文件以07777属性设置。这可导致获得敏感信息或提升特权。 FreeBSD FreeBSD 8.0-STABLE FreeBSD FreeBSD 8.0-RELEASE FreeBSD FreeBSD 7.2-STABLE FreeBSD FreeBSD 7.1-STABLE FreeBSD...

Twitter Outage A DNS Hack

Microblogging site Twitter went offline for a while Friday after hackers calling themselves the Iranian Cyber Army apparently managed to change DNS records, redirecting traffic to another Web page. Read the full article. Computerworld...

Design/Logic Flaw

Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv99 through snv123, allows remote attackers to cause a denial of service daemon outage via unknown vectors that trigger a "dangling sshd authentication thread."...

CVE-2009-4051

Summary: CVE-2009-4051 affects Home FTP Server, specifically versions earlier than 1.10.3.144. The issue allows remote attackers to cause a denial of service (daemon outage) by sending multiple invalid SITE INDEX commands. The public metrics indicate a CVSS v2 base score of 5.0 (AV:N/AC:L/Au:N/C:...

tomcat6 Denial-Of-Service with AJP connection

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and modjk load balancing are used, allows remote attackers to cause a denial of service application outage via a crafted request with invalid headers, related to temporary blocking of...

CVE-2009-1883

The z90cryptunlockedioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage...