Forced Shutdown or Restart with JP1/ServerConductor/Deployment Manager

Overview JP1/ServerConductor/Deployment Manager's Client Service for DPM has a vulnerability which could cause a shutdown or restart of the client computer when receiving ill-formed data. Impact A remote attacker could shut down or restart the target system. Solution Please refer to the 'Vendor...

Microsoft Windows DNS Client Buffer Overrun (CVE-2006-3441)

There exists a buffer overflow vulnerability in the DNS client component of Microsoft Windows. The flaw is caused by the improper processing of crafted DNS messages. A remote attacker may leverage this vulnerability by sending crafted DNS responses to the affected service, resulting in the possib...

CVE-2010-2093

Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service crash via a stream context structure that is freed before destruction occurs...

WebSAM DeploymentManager vulnerable to denial of service

Overview WebSAM DeploymentManager contains a denial of service DoS vulnerability. WebSAM DeploymentManager is a product that manages the distribution of security patches. WebSAM DeploymentManager contains a denial of service DoS vulnerability. Servers or workstations that installed "Client Servic...

Mandriva Update for plymouth MDVA-2010:132 (plymouth)

Check for the Version of plymouth OpenVAS Vulnerability Test Mandriva Update for plymouth MDVA-2010:132 plymouth Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

ID Theft Services Domain Shut Down by Feds

Two Belarusian nationals suspected of operating a rent-a-fraudster service for bank and identity thieves have been arrested overseas, according to New York authorities, who unsealed an indictment for one of the suspects. Read the full article. Wired...

ISP Known for Distributing Malware Goes Dark

A network frequently used for malware delivery was shut down Wednesday night, probably against the will of its operators. Troyak.org, an Internet service provider well-known for serving Zeus botnets and other malware delivery methods, went dark overnight, resulting in the shutdown of as many as 2...

Vodafone-Distributed Handset Found Pre-installed With Mariposa Bot

Security researchers have found the Mariposa bot client pre-installed on a mobile phone handset distributed in Europe, and say that the malware looks to have been installed on the phone’s memory card. The phone, the HTC Magic, runs the Google Android mobile operating system, and is a low-priced...

CentOS 5 : kvm (CESA-2010:0088)

Updated kvm packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for...

Design/Logic Flaw

Unspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20, as used in SAP NetWeaver 7.x and SAP Web Application Server 6.x and 7.x, allows remote attackers to cause a denial of service Management Console shutdown via a crafted request. NOTE: some of the...

CVE-2009-4603

CVE-2009-4603 affects SAP Kernel components sapstartsrv.exe across versions 6.40, 7.00, 7.01, 7.10, 7.11, 7.20 used in SAP NetWeaver 7.x and SAP Web Application Server 6.x/7.x. The vulnerability allows remote attackers to cause a denial of service (Management Console shutdown) via a crafted reque...

RedHat Security Advisory RHSA-2009:1671

The remote host is missing updates announced in advisory RHSA-2009:1671. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle...

CVE-2009-4417

The shutdown function in the ZendLogWriterMail class in Zend Framework ZF allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."...

CVE-2009-4417

The CVE concerns Zend Framework’s Zend_Log_Writer_Mail shutdown function. Affected component is Zend Framework (ZF) – specifically Zend_Log_Writer_Mail – where the shutdown() path allows context-dependent attackers to cause arbitrary e-mails to be sent to any recipient via vectors related to “eve...

kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket

net/unix/afunix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service system hang by creating an abstract-namespace AFUNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket...

kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket

net/unix/afunix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service system hang by creating an abstract-namespace AFUNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket...

Microsoft SMS Remote Control Service Denial of Service (CVE-2004-0728)

Microsoft's Systems Management Server SMS is a change and configuration management server for the Microsoft Windows platforms. One component of this system is a client utility that allows an administrator to obtain control over remote client computer. This remote assistance service is installed a...

Mandriva Security Advisory MDVSA-2009:301 (kernel)

The remote host is missing an update to kernel announced via advisory MDVSA-2009:301. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Linux Kernel 2.6.31.4 - unix_stream_connect() Local Denial of Service

Linux Kernel 2.6.31.4 - unixstreamconnect Local Denial of Service int mainvoid int ret; int csd; int lsd; struct sockaddrun sun; / make an abstruct name address / memset&sun, 0, sizeofsun; sun.sunfamily = PFUNIX; sprintf&sun.sunpath1, "%d", getpid; / create the listening socket and shutdown / lsd...

Where Are We A Year After McColo Shutdown?

In the year since the shutdown of notorious Web hosting firm McColo, spammers are growing strong. Part of this is the result of improvements by botnet operators. Like anyone who is successful what they do, the people controlling the most powerful botnets in cyber-space learn from their mistakes...