6687 matches found
Microsoft RRAS Service RASMAN Registry Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft RR...
smb 0day network penetration and Defense-vulnerability warning-the black bar safety net
This smb 0day vulnerabilities out for a long time, since the bun work is too busy, has not bother to pay attention to it. The vulnerability affects vista, Windows 7 and windows 2 0 0 8, EXP now surely everyone on hand the others also have, it was tested can be very good to attack vista and 2 0 0 ...
[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.2-2.fc11
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.3-2.fc11
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
fwbuilder -- security issue in temporary file handling
Firewall Builder release notes reports: Vadim Kurland [email protected] reports: Fwbuilder and libfwbuilder 3.0.4 through to 3.0.6 generate iptables scripts with a security issue when also used to generate static routing configurations...
Memory corruption
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...
CVE-2009-1168
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...
CVE-2009-2049
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1 through 12.233SXI2, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows...
CVE-2009-2049
CVE-2009-2049 covers Cisco IOS/IOS XE with RFC4893 BGP enabled. A remote attacker can trigger a device reload by sending a malformed BGP update from a 4‑byte AS speaker to a 2‑byte AS speaker (Bug CSCta33973). Affects multiple releases across 12.x trains and IOS XE 2.3–2.4; exploitation leads to ...
CVE-2009-1168
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...
CVE-2009-1168: Undefined Security Weakness
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...
CVE-2009-2049: Undefined Security Weakness
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1 through 12.233SXI2, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows...
RIP-2 Poisoning Routing Table Modification
This host is running a RIP-2 agent. RIP-2 requests can be authenticated but Nessus cannot check this in the current configuration. If authentication is not implemented, an attacker on the same network may feed the target machine bogus routes and hijack network connections. Note that this may be a...
RIP-1 Poisoning Routing Table Modification
This host is running a RIP-1 agent. RIP-1 does not implement authentication. An attacker on the same network may feed the target machine bogus routes and hijack network connections. Note that Nessus cannot test this flaw as it is not running on the same network. C Tenable Network Security, Inc...
RIP Poisoning Routing Table Modification (Adjacent Network)
It was possible to poison the remote host routing tables through the RIP protocol. An attacker may use this to hijack network connections. Several RIP agents reject routes that are not sent by a neighbor, so this flaw may not be exploitable from a non-adjacent network. C Tenable Network Security,...
[SECURITY] Fedora 11 Update: quagga-0.99.12-1.fc11
Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...
[SECURITY] Fedora 10 Update: quagga-0.99.12-1.fc10
Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...
Debian DSA-1788-1 : quagga - improper assertion
It was discovered that Quagga, an IP routing daemon, could no longer process the Internet routing table due to broken handling of multiple 4-byte AS numbers in an AS path. If such a prefix is received, the BGP daemon crashes with an assert failure, leading to a denial of service. %NASLMINLEVEL...
[SECURITY] [DSA 1787-1] New quagga packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1788-1 [email protected] http://www.debian.org/security/ Florian Weimer May 04, 2009 http://www.debian.org/security/faq -...
