FreePBX Inbound Route描述存储式跨站脚本漏洞

BUGTRAQ ID: 37849 FreePBX之前被称为Asterisk Management Portal，是IP电话工具Asterisk的标准化实现，可提供Web配置界面和其他工具。 FreePBX的Inbound Route描述部分存在存储式跨站脚本漏洞。已登录用户可以在描述字段输入恶意代码，之后用户查看该页面时就会执行所注入的内容。 FreePBX FreePBX 2.6 FreePBX FreePBX 2.5.x 厂商补丁： FreePBX ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Penetration in the end we should scan what is useful information-vulnerability warning-the black bar safety net

"T． S． T"the Information Security Team'blog If the penetration we need to scan what information? Then the statement could be more, but the routine will scan the following information: 1. The target on the network host IP address 2. The host system can access the UDP or TCP port 3. On the target...

[SECURITY] Fedora 11 Update: quagga-0.99.12-1.fc11

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...

[SECURITY] Fedora 10 Update: quagga-0.99.12-1.fc10

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...

Mandriva Update for ppp MDVA-2008:087 (ppp)

Check for the Version of ppp OpenVAS Vulnerability Test Mandriva Update for ppp MDVA-2008:087 ppp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

kernel: rt_cache leak leads to lack of network connectivity

The icmpsend function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache aka DST in some situations involving transmission of an ICMP Host Unreachable message, which allows remo...

Linux Kernel /proc/net/rt_cache远程拒绝服务漏洞

BUGTRAQ ID: 34084 CVECAN ID: CVE-2009-0778 Linux Kernel是开放源码操作系统Linux所使用的内核。 即使缓存的路由表保持不变，/proc/slabinfo中的ipdstcache值也会一直递增，这会导致ipdstcache最终会到达 /proc/sys/net/ipv4/route/maxsize的值。当到达该值的时候，内核就会报告“dst cache overflow”，之后服务器不再响应任何网络活动。 Linux kernel 2.6.x 临时解决方法： 删除REJECT路由，或用ip route add 10.10.0.0/16...

Design/Logic Flaw

The icmpsend function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache aka DST in some situations involving transmission of an ICMP Host Unreachable message, which allows remo...

CVE-2009-0778

The icmpsend function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache aka DST in some situations involving transmission of an ICMP Host Unreachable message, which allows remo...

CVE-2009-0778

CVE-2009-0778 affects the Linux kernel prior to 2.6.25 when configured as a router with a REJECT route. The icmp_send code in net/ipv4/icmp.c can mishandle the Protocol Independent Destination (DST) cache, potentially leaking DST state and allowing remote attackers to cause a denial of service (c...

PT-2009-3389 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.25 Description: The issue is related to the icmp send function in the Linux kernel, which does not properly manage the Protocol Independent Destination Cache DST when configured as a router with a REJECT...

Fedora Update for quagga FEDORA-2007-0838

Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2007-0838 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for quagga FEDORA-2007-2196

Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2007-2196 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Windows Vista iphlpapi.dll本地内核栈溢出漏洞

BUGTRAQ ID: 32357 Windows Vista是微软发布的最新版本的操作系统。 在使用CreateIpForwardEntry2方式向IPv4路由表添加路由项时，如果对MIBIPFORWARDROW2结构所包含的DestinationPrefix结构中的目标PrefixLength成员传送了大于32的非法值的话，就会破坏内核空间内存，导致随机的蓝屏崩溃。传送的非法值越大，所触发的崩溃就会越快出现。 此外如果使用系统自带的route add命令并在子网掩码中使用了非法值的话，该命令也可以触发相同的缓冲区溢出。 Microsoft Windows Vista Microsof...

Microsoft VISTA TCP/IP stack buffer overflow

phion Security Advisory 21/10/2008 Microsoft VISTA TCP/IP stack buffer overflow Summary ----------------------------- Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory...

CVE-2008-3803

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

Design/Logic Flaw

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

CVE-2008-3803

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

Black the world God soldiers-Cain-the-vulnerability warning-the black bar safety net

You can right-click for playback. Below we to carry out Arp spoofing, click on the following“ARP”tab ! 1 4） On the right side of the blank at a click, and then point above the“plus sign”, the emergence of the“new ARP spoofing”dialog box, in the left of the selected Gateway, the right choice is...

CVE-2008-2173

Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...