CVE-2006-5075

The Kernel SSL Proxy service svc:/network/ssl/proxy in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service system crash via unspecified vectors related to an SSL client...

CVE-2006-5075: Undefined Security Weakness

The Kernel SSL Proxy service svc:/network/ssl/proxy in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service system crash via unspecified vectors related to an SSL client...

CVE-2006-4855

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1,...

Linux kernel DoS

Special SOLINGER value for SCTP socket causes system to crash. ELF loader vulnerability on 64-bit system causes system to crash on malformed ELF binary...

CVE-2006-4855: Undefined Security Weakness

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1,...

Linux kernel UDF DoS

System crash on connecting device USB, CD-ROM with invalid UDF filesystem...

ISS BlackICE PC Protection Insufficient validation of arguments of NtOpenSection Vulnerability

Hello, I would like to inform you about a vulnerability in BlackICE PC Protection driver found by Matousec - Transparent security. Description: Hooking SSDT functions requires extra caution. SSDT function handlers are executed in the kernel mode but their callers are executed in the user mode...

ISS BlackICE PC Protection DoS

Invalid NtOpenSection hook causes sytem to crash if 3rd paramter is NULL...

CVE-2006-4015

HP ProCurve 3500yl, 6200yl, and 5400zl switches with software before K.11.33 are affected by CVE-2006-4015, allowing remote attackers to cause a denial of service (potential memory leak or system crash) via unknown vectors. The advisory specifies the affected models and firmware range but provide...

CVE-2006-4015: Undefined Security Weakness

Hewlett-Packard HP ProCurve 3500yl, 6200yl, and 5400zl switches with software before K.11.33 allow remote attackers to cause a denial of service possibly memory leak or system crash via unknown vectors...

CVE-2006-3942

The server driver srv.sys in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service system crash via an SMBCOMTRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the...

CVE-2006-3942: Improper Input Validation

The server driver srv.sys in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service system crash via an SMBCOMTRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the...

Mozilla products VCard attachment buffer overflow

Overview Mozilla products fail to properly handle malformed VCard attachments, which allows a buffer overflow to occur. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description According to Mozilla Foundation Security Advisory 2006-49:A VCard...

Linux-HA Heartbeat 1.2.3/2.0.x - Insecure Default Permissions on Shared Memory

// source: https://www.securityfocus.com/bid/19186/info Since Linux-HA Heartbeat has insecure default permissions set on shared memory, local attackers may be able to cause a denial of service. Exploitation would most likely result in a system crash, loss of data, and resource exhaustion, leading...

CVE-2006-3540

CVE-2006-3540 affects Check Point Zone Labs ZoneAlarm Internet Security Suite (examples: 6.5.722.000, 6.1.737.000). The issue arises from improper validation of RegSaveKey, RegRestoreKey, and RegDeleteKey calls when targeting the registry path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\...

CVE-2006-3540: Undefined Security Weakness

Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSaveKey, RegRestoreKey, and RegDeleteKey function calls, which allows local users to cause a denial of service system crash via a certain combination of these...

CentOS 4 : kernel (CESA-2005:420)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the first regular update. Updated 9 August 2005 The advisory text has been updated to show that this update also contained fixes for the security issues named...

Patching non-exported, non-system-service kernel functions

Patching non-exported, non-system-service kernel functions KAV's kernel patching is not limited to just system services, however. One of the most dangerous hooks that KAV installs is one in the middle of the nt!SwapContext function, which is neither exported nor a system service and thus has no...

Improper Validation of Kernel Object Types

Improper Validation of Kernel Object Types Windows exposes many kernel features through a series of kernel objects''. These objects may be acted upon by user mode through the user of handles. Handles are integral values that are translated by the kernel into pointers to a particular object upon...

CVE-2006-1797

The CVE-2006-1797 entry describes a local denial-of-service in NetBSD-current kernels released before 28 September 2005. A local attacker can trigger a NULL pointer dereference by issuing the SIOCGIFALIAS ioctl to query information about a non-existent network alias, causing a system crash. The a...