Linux Kernel 2.6.31.4 - unix_stream_connect() Local Denial of Service

Linux Kernel 2.6.31.4 - unixstreamconnect Local Denial of Service int mainvoid int ret; int csd; int lsd; struct sockaddrun sun; / make an abstruct name address / memset&sun, 0, sizeofsun; sun.sunfamily = PFUNIX; sprintf&sun.sunpath1, "%d", getpid; / create the listening socket and shutdown / lsd...

Where Are We A Year After McColo Shutdown?

In the year since the shutdown of notorious Web hosting firm McColo, spammers are growing strong. Part of this is the result of improvements by botnet operators. Like anyone who is successful what they do, the people controlling the most powerful botnets in cyber-space learn from their mistakes...

kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket

net/unix/afunix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service system hang by creating an abstract-namespace AFUNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket...

CVE-2009-3229

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service backend shutdown by "re-LOAD-ing" libraries from a certain plugins directory...

Vulnerability in core server (CVE-2009-3229)

Authenticated non-superusers can shut down the backend server by re-LOAD-ing libraries in $libdir/plugins, if any libraries are present there...

PostgreSQL Multiple Vulnerabilities

Binary data 5170.prm...

Hack the network to achieve the overload attack to the process of parsing-vulnerability warning-the black bar safety net

In network overload attack, a shared resource or service due to the need to process large amounts of request that cannot be met from other users of the arrival of the request. For example, a user generates a lot of processes, then other users cannot run own processes. If a user uses a lot of disk...

Firebird SQL DoS

opconnectrequest request with invalid paramters causes server to shutdown listening socket end enter infinite loop...

openSUSE Security Update : postfix (postfix-194)

When exectuting external programs postfix didn't close the file descriptor of the epoll system call. This could potentially be exploited to shutdown postfix CVE-2008-3889. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

openSUSE Security Update : ConsoleKit (ConsoleKit-132)

ConsoleKit allows anyone to shutdown/restart the machine due to missing PolicyKit support. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ConsoleKit-132. The text description of this plugin i...

Linux/x86 - execve(/sbin/shutdown,/sbin/shutdown 0) Shellcode (36 bytes)

Linux/x86 - execve/sbin/shutdown,/sbin/shutdown 0 Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform include const char shellcode= "\x6a\x0b" // push $0xb "\x58" // pop %eax "\x99" // cltd "\x52" // push %edx "\x68\x64\x6f\x77\x6e" // push $0x6e776f64 "\x68\x73\x68\x75\x74" // push...

Code injection

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via paneactionbutton.php, and then executing this action via execaction.php...

CVE-2008-6816

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via paneactionbutton.php, and then executing this action via execaction.php...

CVE-2008-6816

CVE-2008-6816 affects Eaton MGEOPS Network Shutdown Module prior to 3.10 Build 13. An attacker can add a custom action in pane_actionbutton.php and then trigger it via exec_action.php, enabling remote arbitrary code execution. The NASL/NVD data also notes authentication bypass in older versions (...

CVE-2008-6816

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via paneactionbutton.php, and then executing this action via execaction.php...

FBI, US Marshals hit by mystery malware

From the Associated Press Law enforcement computers were struck by a Mystery computer virus Thursday, forcing the FBI and the U.S. Marshals to shut down part of their networks as a precaution. The U.S. Marshals confirmed it disconnected from the Justice Department’s computers as a protective...

CVE-2008-1517

Array index error in the xnu Mach kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service system shutdown via unspecified vectors related to workqueues...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:234)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Buffer overflow in the hfsplusfindcat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service memory corruption or system crash via an hfsplus filesystem image...

MDKA-2007:130 : evolution-data-server

A reference leak prevented evolution-data-server to correctly shutdown when terminating a GNOME session. This prevented some programs to start correctly when login back after a logout. Updated package fixes this issue, and include stability fixes for Evolution mail client GNOME bugs 271777, 48835...

Fedora 10 : proftpd-1.3.1-8.fc10 (2009-0089)

This update fixes a security issue where an attacker could conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands. It also fixes some SSL shutdown issues seen with certain clients. Note that Tenable Network Security has extracted the preceding description block directl...