Debian DSA-1184-2 : kernel-source-2.6.8 - several vulnerabilities

This advisory covers the S/390 components of the recent security update for the Linux 2.6.8 kernel that were missing due to technical problems. For reference, please see the text of the original advisory. Several security related problems have been discovered in the Linux kernel which may lead to...

The Common Market encrypted disc crack not full tricks big secret-vulnerability warning-the black bar safety net

Now on the market there are many encrypted discs, these discs are a special form of burn. Put it into drive, it will appear a software installation screen want you to enter the serial number, if serial number is correct it will appear a file browser window, the error then jumps back to the deskto...

DSA-1184-2 kernel-source-2.6.8 - several vulnerabilities

Bulletin has no description...

security flaw

The ftdisio driver usb/serial/ftdisio.c in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued...

security flaw

Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service kernel OOPS via a userspace process that issues a USB Request Block URB to a USB device and terminates before the URB is finished, which leads to a stale pointer reference...

Hardcoded credentials

The ftdisio driver usb/serial/ftdisio.c in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued...

CVE-2006-2936

The ftdisio driver usb/serial/ftdisio.c in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued...

CVE-2006-2936: Undefined Security Weakness

The ftdisio driver usb/serial/ftdisio.c in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued...

CVE-2006-1538

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

CVE-2006-1538: Undefined Security Weakness

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

slsnif-ploit.pl.txt

Original can be found at http://shellcoders.com/sintigan/slsnif-ploit.pl Author: [email protected] http://www.shellcoders.com/ ---------------------------------------- Program ID: Serial Line Sniffer 0.4.4 sintigan@midnight:/home/sintigan$ perl slsnif-ploit.pl sh-3.00 id uid=0root...

Buffer overflow

Unspecified vulnerability in Serial line sniffer aka slsnif 0.4.4 allows local users to gain privileges via a long value of the HOME environment variable, possibly because of a buffer overflow...

CVE-2006-0196

Unspecified vulnerability in Serial line sniffer aka slsnif 0.4.4 allows local users to gain privileges via a long value of the HOME environment variable, possibly because of a buffer overflow...

CVE-2006-0196

Unspecified vulnerability in Serial line sniffer aka slsnif 0.4.4 allows local users to gain privileges via a long value of the HOME environment variable, possibly because of a buffer overflow...

CVE-2006-0196: Undefined Security Weakness

Unspecified vulnerability in Serial line sniffer aka slsnif 0.4.4 allows local users to gain privileges via a long value of the HOME environment variable, possibly because of a buffer overflow...

slsnif serial line sniffer buffer overflow

Buffer overflow on parsing HOME environment variable...

PT-2026-26286

Name of the Vulnerable Software and Affected Versions XML::Parser versions through 2.47 Description The software contains a heap buffer overflow in the st serial stack function. This occurs when parsing XML files with deeply nested elements. Specifically, when stackptr equals stacksize - 1, the...

CVE-2002-2203: Undefined Security Weakness

Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information...

CVE-2005-3196: Undefined Security Weakness

Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges...

planetBackdoor.txt

Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...