8370 matches found
CVE-2006-5075
The Kernel SSL Proxy service svc:/network/ssl/proxy in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service system crash via unspecified vectors related to an SSL client...
CVE-2006-4855
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1,...
Linux kernel DoS
Special SOLINGER value for SCTP socket causes system to crash. ELF loader vulnerability on 64-bit system causes system to crash on malformed ELF binary...
Linux kernel UDF DoS
System crash on connecting device USB, CD-ROM with invalid UDF filesystem...
ISS BlackICE PC Protection DoS
Invalid NtOpenSection hook causes sytem to crash if 3rd paramter is NULL...
ISS BlackICE PC Protection Insufficient validation of arguments of NtOpenSection Vulnerability
Hello, I would like to inform you about a vulnerability in BlackICE PC Protection driver found by Matousec - Transparent security. Description: Hooking SSDT functions requires extra caution. SSDT function handlers are executed in the kernel mode but their callers are executed in the user mode...
CVE-2006-4015
HP ProCurve 3500yl, 6200yl, and 5400zl switches with software before K.11.33 are affected by CVE-2006-4015, allowing remote attackers to cause a denial of service (potential memory leak or system crash) via unknown vectors. The advisory specifies the affected models and firmware range but provide...
CVE-2006-3942
The server driver srv.sys in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service system crash via an SMBCOMTRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the...
Linux-HA Heartbeat 1.2.3/2.0.x - Insecure Default Permissions on Shared Memory
// source: https://www.securityfocus.com/bid/19186/info Since Linux-HA Heartbeat has insecure default permissions set on shared memory, local attackers may be able to cause a denial of service. Exploitation would most likely result in a system crash, loss of data, and resource exhaustion, leading...
Mozilla products VCard attachment buffer overflow
Overview Mozilla products fail to properly handle malformed VCard attachments, which allows a buffer overflow to occur. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description According to Mozilla Foundation Security Advisory 2006-49:A VCard...
CVE-2006-3540
CVE-2006-3540 affects Check Point Zone Labs ZoneAlarm Internet Security Suite (examples: 6.5.722.000, 6.1.737.000). The issue arises from improper validation of RegSaveKey, RegRestoreKey, and RegDeleteKey calls when targeting the registry path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\...
CentOS 4 : kernel (CESA-2005:420)
Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the first regular update. Updated 9 August 2005 The advisory text has been updated to show that this update also contained fixes for the security issues named...
Improper Validation of Kernel Object Types
Improper Validation of Kernel Object Types Windows exposes many kernel features through a series of kernel objects''. These objects may be acted upon by user mode through the user of handles. Handles are integral values that are translated by the kernel into pointers to a particular object upon...
Patching non-exported, non-system-service kernel functions
Patching non-exported, non-system-service kernel functions KAV's kernel patching is not limited to just system services, however. One of the most dangerous hooks that KAV installs is one in the middle of the nt!SwapContext function, which is neither exported nor a system service and thus has no...
CVE-2006-1797
The CVE-2006-1797 entry describes a local denial-of-service in NetBSD-current kernels released before 28 September 2005. A local attacker can trigger a NULL pointer dereference by issuing the SIOCGIFALIAS ioctl to query information about a non-existent network alias, causing a system crash. The a...
CVE-2006-1797
The kernel in NetBSD-current before September 28, 2005 allows local users to cause a denial of service system crash by using the SIOCGIFALIAS ioctl to gather information on a non-existent alias of a network interface, which causes a NULL pointer dereference...
CVE-2005-4776
CVE-2005-4776 describes an integer overflow in the NetBSD FreeBSD compatibility code (freebsd_misc.c) affecting NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 prior to 20050913, and NetBSD-1.6 prior to 20050914. This vulnerability could allow local users to cause a denial of service via heap ...
CVE-2005-4776
Integer overflow in the FreeBSD compatibility code freebsdmisc.c in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause a denial of service heap corruption or system crash and possibly gain root privileges...