Scientific Linux Security Update : xscreensaver on SL3.0.x i386/x86_64

Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user passwords. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen. CVE-2007-1859 %NASLMINLEVEL 70300 C...

Scientific Linux Security Update : xscreensaver on SL4 i386/x86_64

Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user passwords. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen. CVE-2007-1859 %NASLMINLEVEL 70300 C...

CVE-2012-3073

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service networking outage or process crash via 1 malformed IP packets, 2 a high...

Code injection

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service networking outage or process crash via 1 malformed IP packets, 2 a high...

CVE-2012-3073

The CVE-2012-3073 issue affects Cisco TelePresence products via the IP stack: TelePresence Multipoint Switch (before 1.8.1), TelePresence Manager (before 1.9.0), and TelePresence Recording Server (1.8 and earlier). The vulnerability allows remote attackers to trigger a DoS (network outage or proc...

Twitter Denies Hacktivists Behind Severe Outage

Twitter officials say it was a “cascading bug” and not the handiwork of hacktivists that brought down the microblogging site today in two separate outages. “This wasn’t due to a hack or our new office or Euro 2012 or GIF avatars, as some have speculated today,” Mazen Rawashdeh, the company’s vice...

Mandriva Update for nut MDVSA-2012:087 (nut)

Check for the Version of nut OpenVAS Vulnerability Test Mandriva Update for nut MDVSA-2012:087 nut Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for nut MDVSA-2012:087 (nut)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : nut (MDVSA-2012:087)

A vulnerability has been discovered and corrected in nut : Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing...

CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

Buffer overflow

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

CVE-2012-2944

The CVE-2012-2944 vulnerability affects Network UPS Tools (NUT) upsd. A buffer overflow in the addchar() function of parseconf.c can be triggered by a long string containing non-printable characters, allowing a remote attacker to cause arbitrary code execution or a denial of service. Affected: NUT

CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

CVE-2012-1821

The Network Threat Protection module in the Manager component in Symantec Endpoint Protection SEP 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service web-server outage, or daemon crash or hang via a flood of packets that triggers automated...

SuSE 10 Security Update : kernel-debug (ZYPP Patch Number 6986)

This SUSE Linux Enterprise 10 SP3 kernel update for x8664 only fixes a severe regression introduced by the previous bugfix that would make some machines not boot due to iommu / AGP memory issues. The update also fixes several other bugs and the following security issue : - drivers/net/r8169.c in...

Stack overflow

Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service device outage or possibly execute arbitrary code via a crafted...

Design/Logic Flaw

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service service outage via a craft...

CVE-2012-1311

The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service interface queue wedge and service outage via crafted RSVP packets, aka Bug ID CSCts80643...

CVE-2012-1311

The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service interface queue wedge and service outage via crafted RSVP packets, aka Bug ID CSCts80643...

Facebook down for two hours across Europe, May be DDOS attack !

Facebook down for two hours across Europe, May be DDOS attack ! In a DDoS attack, hackers deliberately render servers inaccessible by overloading them with traffic. Such a barrage aimed at DNS servers can make it impossible to connect users to a website when they type the address. Where as facebo...