CVE-2008-0177

The ipcomp6input function in sys/netinet6/ipcompinput.c in the KAME project before 20071201 does not properly check the return value of the mpulldown function, which allows remote attackers to cause a denial of service system crash via an IPv6 packet with an IPComp header...

CVE-2008-0177

The ipcomp6input function in sys/netinet6/ipcompinput.c in the KAME project before 20071201 does not properly check the return value of the mpulldown function, which allows remote attackers to cause a denial of service system crash via an IPv6 packet with an IPComp header...

CVE-2008-0177

CVE-2008-0177 arises from an unchecked return value in ipcomp6_input (sys/netinet6/ipcomp_input.c) in the KAME project, where m_pulldown is not verified before use. This allows remote attackers to trigger a denial of service (system crash) by sending an IPv6 packet containing an IPComp header. Th...

CVE-2008-0366

CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service system crash and possibly execute arbitrary code in the kernel context via crafted arguments...

Debian Security Advisory DSA 1293-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 1293-1. OpenVAS Vulnerability Test $Id: deb12931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1293-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 047-1 (various kernel packages)

The remote host is missing an update to various kernel packages announced via advisory DSA 047-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Debian Security Advisory DSA 023-1 (inn2)

The remote host is missing an update to inn2 announced via advisory DSA 023-1. OpenVAS Vulnerability Test $Id: deb0231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 023-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1237-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Solaris ICMP DoS

Malformed ICMP packets cause system to crash...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

CVE-2007-5761

CVE-2007-5761 concerns Motorola netOctopus, where the NantSys driver (nantsys.sys) exposes a device interface (\.\NantSys) writable by all local users. The driver can read/write arbitrary CPU MSRs, and manipulating SYSENTER_EIP_MSR enables arbitrary kernel-mode code execution or system crashes. A...

Buffer overflow principle analysis and protection-vulnerability warning-the black bar safety net

【Abstract】this article from the programming language itself of the defect,is not robust to the perspective,a detailed analysis of buffer overflow attacks the basic principles,describes hackers exploit buffer vulnerabilities system attacks the General process,finally and briefly discussed several...

PT-2008-09: Microsoft Windows MSMQ Privilege Escalation Vulnerability

Positive Technologies Research Team has discovered a privilege escalation vulnerability in Windows Message Queuing service MSMQ. The IOCTL handler in mqac.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system or execute arbitrary...

PT-2008-07: VMware Multiple Products hcmon.sys Denial of Service Vulnerability

Positive Technologies Research Team has discovered denial of service vulnerabilities in VMware products. The IOCTL handler in hcmon.sys does not properly validate buffer data associated with the Irp object, which allows local users with administrative priviligies to crash the system. Solution...

CVE-2007-6519

The CVE concerns HP Tru64 UNIX, specifically the File-on-File Mounting File System (FFM) in versions 5.1B-4 and 5.1B-3. The vulnerability is described as unspecified and locally exploitable, causing a denial of service (system crash) via unspecified vectors. The connected documents do not provide...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2606)

This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...

SuSE 10 Security Update : madwifi (ZYPP Patch Number 3897)

The madwifi driver and userland packages were updated to 0.9.3.1. Please note that while the RPM version still says '0.9.3', the content is the 0.9.3.1 version. This updates fixes following security problems : - The 802.11 network stack in net80211/ieee80211input.c in MadWifi before 0.9.3.1 allow...

IBM AIX chfs命令拒绝服务漏洞

BUGTRAQ ID: 26670 CNCAN ID:CNCAN-2007120303 IBM AIX是一款商业性质的操作系统。 IBM AIX chfs命令存在设计问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 在执行chfs命令减少并发卷组中的文件系统大小后，可导致并发卷组中的远程节点崩溃，造成拒绝服务攻击。 IBM AIX 5.3 补丁下载： IBM AIX 5.3 IBM 5300-06-04-0748 http://www-912.ibm.com/eserver/support/fixes/fixcentral/pseriesfixpack...

openSUSE 10 Security Update : kernel (kernel-2705)

This kernel update fixes the following security problems : - CVE-2006-5751: An integer overflow in the networking bridge ioctl starting with Kernel 2.6.7 could be used by local attackers to overflow kernel memory buffers and potentially escalate privileges 222656 - CVE-2006-6106: Multiple buffer...