SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2606)

This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...

IBM AIX chfs命令拒绝服务漏洞

BUGTRAQ ID: 26670 CNCAN ID:CNCAN-2007120303 IBM AIX是一款商业性质的操作系统。 IBM AIX chfs命令存在设计问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 在执行chfs命令减少并发卷组中的文件系统大小后，可导致并发卷组中的远程节点崩溃，造成拒绝服务攻击。 IBM AIX 5.3 补丁下载： IBM AIX 5.3 IBM 5300-06-04-0748 http://www-912.ibm.com/eserver/support/fixes/fixcentral/pseriesfixpack...

openSUSE 10 Security Update : kernel (kernel-2705)

This kernel update fixes the following security problems : - CVE-2006-5751: An integer overflow in the networking bridge ioctl starting with Kernel 2.6.7 could be used by local attackers to overflow kernel memory buffers and potentially escalate privileges 222656 - CVE-2006-6106: Multiple buffer...

airsensor-dos.txt

!/usr/bin/perl -w Airsensor M520 HTTPD Remote Preauth Denial Of Service and Buffer Overflow PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending a specially crafted HTTPS request necessary...

Airsensor M520 - HTTPd Remote Denial of Service Buffer Overflow (PoC)

Airsensor M520 - HTTPd Remote Denial of Service Buffer Overflow PoC !/usr/bin/perl -w Airsensor M520 HTTPD Remote Preauth Denial Of Service and Buffer Overflow PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploite...

Tencent QQ scene vulnerability to the hack of the law-vulnerability and early warning-the black bar safety net

According to analysys international released the 2 0 0 7 in the first 2 quarters of China im market quarterly monitoring report shows, Chinese active IM software account has reached 3. 7 6 million, which has 2. 9 million active user accounts for Tencent QQ is well deserved IM the king. But did yo...

Design/Logic Flaw

vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...

CVE-2007-4593: Undefined Security Weakness

Unspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash via unspecified vectors, as demonstrated by the DC2 test suite, possibly a related issue to CVE-2007-4591. NOTE: the provenance of this information is...

IBM AIX rmpvc工具本地缓冲区溢出漏洞

BUGTRAQ ID: 25217 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的rmpvc工具在处理命令行参数时存在缓冲区溢出漏洞，本地攻击可能利用此漏洞导致系统崩溃。 如果执行rmpvc -l port logical name命令时，logical namel参数超过16个字符的话，就可以触发这个溢出，导致系统崩溃。 IBM AIX 4.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[Full-disclosure] Cisco Security Advisory: Cisco IOS Information Leakage Using IPv6 Routing Header

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Information Leakage Using IPv6 Routing Header Advisory ID: cisco-sa-20070808-IOS-IPv6-leak http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-IPv6-leak.shtml Revision 1.0 For Public Release 2007 August 08 160...

CVE-2007-4228: Undefined Security Weakness

rmpvc on IBM AIX 4.3 allows local users to cause a denial of service system crash via long port logical name -l argument...

[Full-disclosure] ASA-2007-018: Resource exhaustion vulnerability in IAX2 channel driver

Asterisk Project Security Advisory - ASA-2007-018 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Resource Exhaustion vulnerability in IAX2 channel | | | driver...

Mandrake Linux Security Advisory : clamav (MDKSA-2007:150)

A vulnerability in the RAR VM in ClamAV allowed user-assisted remote attackers to cause a crash via a crafted RAR archive which resulted in a NULL pointer dereference. Other bugs have also been corrected in 0.91.1 which is being provided with this update. %NASLMINLEVEL 70300 C Tenable Network...

Linux PowerPC Kernel Restore_Sigcontext本地拒绝服务漏洞

BUGTRAQ ID: 24845 CVE ID:CVE-2007-3107 CNCVE ID:CNCVE-20073107 Linux PowerPC是一款嵌入式Linux操作系统。 Linux PowerPC存在一个信号处理缺陷，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。...

Mandrake Linux Security Advisory : madwifi-source (MDKSA-2007:132)

The 802.11 network stack in MadWifi prior to 0.9.3.1 would alloa remote attackers to cause a denial of service system hang via a crafted length field in nested 802.3 Ethernet frames in Fast Frame packets, which results in a NULL pointer dereference CVE-2007-2829. The athbeaconconfig function in...

CVE-2007-3248

Unspecified vulnerability in Sun Solaris 10 before 20070614, when IPv6 interfaces are present but not configured for IPsec, allows remote attackers to cause a denial of service system crash via certain network traffic...

CVE-2007-3248: Undefined Security Weakness

Unspecified vulnerability in Sun Solaris 10 before 20070614, when IPv6 interfaces are present but not configured for IPsec, allows remote attackers to cause a denial of service system crash via certain network traffic...

Code injection

Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service system crash via certain XDR data in NFS requests, probably related to processing of data by the xdrbool and xdrmblkgetint32 functions...

Code injection

The Pascal run-time library PAS$RTL.EXE before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service system crash via certain Pascal code...

CVE-2007-2998

CVE-2007-2998 affects the Pascal run-time library PAS$RTL.EXE on OpenVMS: OpenVMS for Integrity Servers 8.3 (before 20070418) and OpenVMS Alpha 8.3 (before 20070419). The issue is that PAS$RTL.EXE does not properly restore PC and PSL values, which enables local users to trigger a denial of servic...