CVE-2009-3043

The ttyldischangup function in drivers/char/ttyldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a denial of service system crash, sometimes preceded by a NULL pointer dereference or possibly gain privileges via certain pseudo-terminal I/O activity, as demonstrat...

Null pointer dereference

The ttyldischangup function in drivers/char/ttyldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a denial of service system crash, sometimes preceded by a NULL pointer dereference or possibly gain privileges via certain pseudo-terminal I/O activity, as demonstrat...

CVE-2009-3043

The ttyldischangup function in drivers/char/ttyldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a denial of service system crash, sometimes preceded by a NULL pointer dereference or possibly gain privileges via certain pseudo-terminal I/O activity, as demonstrat...

Hackers can invade Vientiane, the server of the method of analysis-vulnerability warning-the black bar safety net

Today, many Internet cafes have installed a Vientiane cafe management system, this system brings convenience is obvious. However, the more convenient the system The existence of security risks is greater, many hackers will come up with a hack of this management system approach, and some can even...

CVE-2009-2698

The udpsendmsg function in the UDP implementation in 1 net/ipv4/udp.c and 2 net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash via vectors involving the MSGMORE flag and a UDP socket...

IBM AFS客户端拒绝服务漏洞

Bugraq ID: 36102 IBM AFS是一款分布式网络文件系统。 IBM AFS客户端存在一个未明安全错误，远程攻击者可以利用漏洞使系统崩溃。 目前没有详细漏洞细节提供。 IBM AFS 3.6 用户可参考如下安全公告获得补丁信息： http://www-01.ibm.com/support/docview.wss?uid=swg21396389...

Null pointer dereference

The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0...

Design/Logic Flaw

kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System HIPS 8.1 allows remote attackers to cause a denial of service system crash via a malformed packet...

CVE-2009-0682

CA Internet Security Suite vulnerable to local denial-of-service via IOCTL handling in vetmonnt.sys. Affects CA Internet Security Suite r3, and r4 up to 9.0.0.184, and r5 up to 10.0.0.217. The IOCTL verifier did not properly validate the Irp-buffer, enabling a crafted IOCTL to crash the system. P...

CA Host-Based Intrusion Prevention System DoS

Malformed network packet causes system crash because of error in kmxIds.sys driver...

CVE-2009-2768

The loadflatsharedlibrary function in fs/binfmtflat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by executing a shared flat binary, which triggers a...

Null pointer dereference

The loadflatsharedlibrary function in fs/binfmtflat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by executing a shared flat binary, which triggers a...

Design/Logic Flaw

Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service system crash by placing file descriptors in messages sent to a socket that has no receiver, related to a "synchronization issue."...

CVE-2009-2406

Stack-based buffer overflow in the parsetag11packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving a crafted eCryptfs file, related to n...

CVE-2009-2407

Heap-based buffer overflow in the parsetag3packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a...

openSUSE Security Update : kernel (kernel-111)

The openSUSE 11.0 kernel was updated to 2.6.25.11. It fixes following security problems: CVE-2008-2812: Various tty / serial devices did not check functionpointers for NULL before calling them, leading to potential crashes or code execution. The devices affected are usually only accessible by the...

Sun Solaris IP Filter (ipf(5))远程拒绝服务漏洞

Bugraq ID: 35715 CNCAN ID：CNCAN-2009071706 Sun Solaris是一款商业性质的操作系统。 Solaris IP Filter ipfilter5存在安全问题，本地或远程攻击者可以利用漏洞使系统崩溃。 目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris...

Tandberg MXP F7.0 (USER) Remote Buffer Overflow PoC

No description provided by source. TANDBERG BoF v0.1 - Tandberg MXP F7.0 Buffer Overflow Vulnerability PoC By otokoyama + We crash the process FtpCt00 by sending a 251 char string of /x20 commonly known as a blank space.very simple + The BOF happens due to the system passing all usernames:passwor...

Linux Kernel kvm_arch_vcpu_ioctl_set_sregs()函数本地拒绝服务漏洞

BUGTRAQ ID: 35529 CVECAN ID: CVE-2009-2287 Linux Kernel是开放源码操作系统Linux所使用的内核。 运行在x86系统上的Linux Kernel的KVM中kvmarchvcpuioctlsetsregs函数没有正确地验证KVMSETSREGS调用中的页表根，本地用户可以通过提交特制的cr3值在gfntormap函数中触发空指针引用，导致受影响的系统崩溃。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Sun Solaris Event Port API多个本地拒绝服务漏洞

Bugraq ID: 35437 CNCAN ID：CNCAN-2009062203 Sun Solaris是一款商业性质的操作系统。 Solaris Event Port API存在竞争条件错误，本地攻击者可以利用漏洞使系统崩溃。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris...