8574 matches found
Linux kernel race konditions
Race conditions on TIOCSETLD during read/write operation on same terminal can cause system to crash and potentially may lead to privilege escalation...
CVE-2004-0569
The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service system crash via a malicious message, possibly related to improper length values...
Debian DSA-047-1 : kernel
The kernels used in Debian GNU/Linux 2.2 have been found to have multiple security problems. This is a list of problems based on the 2.2.19 release notes as found on http://www.linux.org.uk/ : - binfmtmisc used user pages directly - the CPIA driver had an off-by-one error in the buffer code which...
Microsoft Windows - JPEG Processing Buffer Overrun (MS04-028)
!/bin/sh The JPEG vuln is triggered by the 0 or 1 length field with an integer flaw The crafted JPEG header makes Windows crash a couple of different ways 1 First, it crashes when the image is opened. 2 Second, it crashes when hovering the mouse over the image. The pointer overwrite is pretty...
MS Windows JPEG Processing Buffer Overrun Exploit (MS04-028)
Exploit for unknown platform in category dos / poc ============================================================ MS Windows JPEG Processing Buffer Overrun Exploit MS04-028 ============================================================ !/bin/sh The JPEG vuln is triggered by the 0 or 1 length field wi...
[Full-Disclosure] iDEFENSE Security Advisory 09.02.04a: Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability
Oracle Database Server dbmssystem.ksdwrt Buffer Overflow Vulnerability iDEFENSE Security Advisory 09.02.04a www.idefense.com/application/poi/display?id=135&type=vulnerabilities September 2, 2004 I. BACKGROUND Oracle Database Server is a family of database products that range from personal databas...
CVE-2004-0171
The CVE-2004-0171 issue affects FreeBSD 5.1 and earlier and Mac OS X before 10.3.4. It stems from the TCP reassembly queue not limiting the number of out-of-sequence segments, allowing remote attackers to exhaust memory mbufs and crash the system (denial of service) by sending a flood of out-of-s...
AIX 5.2 : IY48149
The remote host is missing AIX Critical Security Patch number IY48149 AutoFs: system crash in aix2oncrele. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
CVE-2004-0767
NGSEC StackDefender 1.10 allows attackers to cause a denial of service system crash via an invalid address for the ObjectAttribues parameter to the hooks for the 1 ZwCreateFile or 2 ZwOpenFile functions...
CVE-2004-0766
NGSEC StackDefender 2.0 allows attackers to cause a denial of service system crash via an invalid address for the BaseAddress parameter to the hooks for the 1 ZwAllocateVirtualMemory or 2 ZwProtectVirtualMemory functions...
CVE-2004-0136
The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service system crash via a "corrupted binary."...
CVE-2004-0554
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service system crash, possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program...
CVE-2004-0551
Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...
CVE-2004-0767
NGSEC StackDefender 1.10 allows attackers to cause a denial of service system crash via an invalid address for the ObjectAttribues parameter to the hooks for the 1 ZwCreateFile or 2 ZwOpenFile functions...
CVE-2004-0766
NGSEC StackDefender 2.0 allows attackers to cause a denial of service system crash via an invalid address for the BaseAddress parameter to the hooks for the 1 ZwAllocateVirtualMemory or 2 ZwProtectVirtualMemory functions...
CVE-2004-0767
The CVE-2004-0767 entry concerns NGSEC StackDefender 1.10. The vulnerability arises when an invalid address is supplied for the ObjectAttributes parameter to the hooks for ZwCreateFile and ZwOpenFile, potentially allowing a denial of service via a system crash. The available documentation provide...
Mandrake Linux Security Advisory : kernel (MDKSA-2004:066)
A number of vulnerabilities were discovered in the Linux kernel that are corrected with this update : Multiple vulnerabilities were found by the Sparse source checker that could allow local users to elevate privileges or gain access to kernel memory CVE-2004-0495. Missing Discretionary Access...
Mandrake Linux Security Advisory : kernel22 (MDKSA-2003:039)
A number of vulnerabilities have been found in the Linux 2.2 kernel that have been addressed with the latest 2.2.25 release. A bug in the kernel module loader code could allow a local user to gain root privileges. This is done by a local user using ptrace and attaching to a modprobe process that ...
Solaris 8 (sparc) : 110075-03
Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Filesystem. Supported versions that are affected are 8 and 9. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...