CentOS Update for kernel CESA-2013:0168 centos5

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2013:0168 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20130122)

This update fixes the following security issues : - It was found that the Xen hypervisor implementation did not perform range checking on the guest provided values in multiple hypercalls. A privileged guest user could use this flaw to trigger long loops, leading to a denial of service Xen...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Design/Logic Flaw

The dissectsflow245addresstype function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type, which allows remote attackers to cause a denial of service infinite loop via a packet that ...

UBUNTU-CVE-2012-6054

The dissectsflow245addresstype function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type, which allows remote attackers to cause a denial of service infinite loop via a packet that ...

PT-2012-4803 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.0 Description: A race condition exists in the IP implementation of the Linux kernel, potentially allowing remote attackers to cause a denial of service. This can be achieved by sending packets to an applicatio...

Scientific Linux Security Update : Scientific Linux 6 kernel on SL6.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - The proc file system could allow a local, unprivileged user to obtain sensitive information or possibly cause integrity issues. CVE-2011-1020, Moderate -...

USN-1264-1: Bind vulnerability

It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to crash, resulting in a denial of service...

Ubuntu 10.04 LTS : linux-lts-backport-natty vulnerabilities (USN-1256-1)

It was discovered that the /proc filesystem did not correctly handle permission changes when programs executed. A local attacker could hold open files to examine details about programs running with higher privileges, potentially increasing the chances of exploiting additional vulnerabilities...

Quest NetVault SmartDisk libnvbasics.dll Denial Of Service

A denial of service vulnerability has been reported in Quest's NetVault SmartDisk. The vulnerability is due to an error in the way SmartDisk handles invalid packet structures. A remote attacker may exploit this vulnerability by sending specially crafted packets to an affected system. Successful...

Citrix Provisioning Services Opcode Stack Buffer Overflow

A stack buffer overflow vulnerability exists in Citrix Provisioning Service. The vulnerability is due to an error when handling packet sent to the Provisioning Services server...

7-Technologies IGSS 9 Data Server/Collector Packet Handling

$Id: igss9misc.rb 12773 2011-05-30 21:06:56Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

7-Technologies IGSS 9 - Data Server/Collector Packet Handling (Metasploit)

$Id: igss9misc.rb 12779 2011-05-31 14:33:19Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities

This module exploits multiple vulnerabilities found on IGSS 9's Data Server and Data Collector services. The initial approach is first by transferring our binary with Write packets opcode 0x0D via port 12401 igssdataserver.exe, and then send an EXE packet opcode 0x0A to port 12397 dc.exe, which...

Citrix Provisioning Services StreamProcess.exe 0x40020010 Packet Handling RCE

The version of the StreamProcess.exe component included with the Citrix Provisioning Services installation running on the remote Windows host fails to validate user-supplied input in a packet type of 0x40020010 before copying it into a fixed length buffer on the stack. An unauthenticated, remote...

Wireshark - ZigBee ZCL Dissector Infinite Loop Denial of Service

Wireshark - ZigBee ZCL Dissector Infinite Loop Denial of Service Source: https://www.securityfocus.com/bid/44986/info Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets. Attackers can exploit this issue to cause the...

ntp security update

CentOS Errata and Security Advisory CESA-2009:1648 An updated ntp package that fixes a security issue is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used t...

DATAC Control RealWin SCADA System Crafted Packet Handling Buffer Overflow (CVE-2008-4322)

RealWin is a SCADA Supervisory Control And Data Acquisition server product developed by DATAC Group. SCADA is generally refers to an industrial control system, in which a computer system monitors and controls a industrial, infrastructure or facility based process. A SCADA System usually consists ...

winremote-dos.txt

include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 2008 r.2+server in the way it handles recieved packets becau...

WinRemotePC Full+Lite 2008 r.2server - Denial of Service

include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 2008 r.2+server in the way it handles recieved packets becau...