Denial of Service

Overview Versions of js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service. Recommendation Upgrade to version 3.13.0. References GitHub Advisory...

Microsoft Windows - Desktop Bridge VFS Privilege Escalation

Windows: Windows: Desktop Bridge VFS EoP Platform: Windows 1709 not tested earlier version Class: Elevation of Privilege Summary: The handling of the VFS for desktop bridge applications can allow an application to create virtual files in system folder which can result in EoP. Description: The...

Input validation

An Improper Input Validation issue was discovered in Nari PCS-9611 relay. An improper input validation vulnerability has been identified that affects a service within the software that may allow a remote attacker to arbitrarily read/access system resources and affect the availability of the syste...

Security and Privacy Assurance Research: SPARTA Framework

Security and Privacy Assurance Research Developed as a part of MIT Lincoln Laboratory’s test and evaluation role in the SPAR Security and Privacy Assurance Research program , SPARTA SPAR Testing and Assessment framework is a set of software applications used to evaluate the functionality and...

Uninstalling Veeam Collectors if a System Resource Pool Was Used for Auto-Deployment

Purpose This article documents how to uninstall Veeam Management Pack for Microsoft System Center if during auto-deployment of Veeam Collectors, one of the system resource pools was used i.e., All Management Servers Resource Pool, Notifications Resource Pool, or AD Assignment Resource Pool. This...

Apple MacOSX 10.9 Hard Link Memory Corruption

Apple MacOSX 10.9 Hard Link Memory Corruption Date: 08.11.2013 http://cxsecurity.com/ http://cvemap.org/ URL: http://cxsecurity.com/issue/WLB-2013110059 - 0. Description --- In most UNIX-like systems a hard link to a directory is only reserved for the 'root' user when possible at all. In MacOSX...

McAfee Email Gateway 6.7.2 Hotfix 2更新修复多个安全漏洞

BUGTRAQ ID: 39242 McAfee Email Gateway之前名为IronMail，是企业级的硬件邮件网关和管理平台。 McAfee Email Gateway的6.7.2 Hotfix 2之前版本中的多个漏洞允许本地用户导致拒绝服务、读取敏感信息、获得权限提升，或允许远程攻击者执行跨站脚本攻击。 1 处理CLI命令时的错误可能耗尽可用的系统资源。 2 由于没有正确地过滤提交给admin/queuedMessage.do页面的queueMsgType和QtnType参数，远程攻击者可以通过提交恶意请求执行跨站脚本攻击。 3...

[SECURITY] Fedora 11 Update: dstat-0.6.9-5.fc11

Dstat is a versatile replacement for vmstat, iostat, netstat and ifstat. Dstat overcomes some of their limitations and adds some extra features, more counters and flexibility. Dstat is handy for monitoring systems during performance tuning tests, benchmarks or troubleshooting. Dstat allows you to...

Microsoft, Cisco Issue Patches for TCP DoS Flaw

Vendors are finally releasing patches today for the TCP vulnerabilities first publicized nearly a year ago that affect a huge range of networking products, including any device running a version of Cisco’s IOS software, and a number of Microsoft server and desktop operating systems. Both Microsof...

Linux Kernel "xt_sctp"拒绝服务攻击漏洞

Secunia Advisory:SA20703 Linux内核被报告一个漏洞，这个漏洞可被恶意攻击者操作进行拒绝服务攻击Denial of Service。 这个漏洞是因为对"xtsctp"代码的SCTP块长度缺省检查引起的。这可能通过一个0长度的块导致一个无限循环从而致使系统资源耗尽。 Linux Kernel 2.6.x 升级到版本2.6.17.1。 http://kernel.org/...

[SECURITY] [DSA 1185-1] New openssl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1185-1 [email protected] http://www.debian.org/security/ Noah Meyerhans September 28th, 2006 http://www.debian.org/security/faq -...

CVE-2005-2283

WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of service system and database resource consumption via a large file...

Microsoft Windows kernel vulnerable to denial-of-service condition via animated cursor (.ani) rate number

Overview A vulnerability exists in the way the Microsoft Windows kernel processes animated cursor .ani files with a rate number set to zero. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Description A vulnerability exists in the way the...

Better Basket Pro 3.0 Store Builder - Full Path Disclosure

source: https://www.securityfocus.com/bid/8386/info It has been reported that Better Basket Pro BBPro Store Builder may reveal path information under some circumstances. This may result a directed attack against system resources. http://www.example.com/pathofstorebuilder/index.php?cat='...

HappyMall E-Commerce Software 4.3/4.4 - 'Member_HTML.cgi' Command Execution

source: https://www.securityfocus.com/bid/7530/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the memberhtml.cgi script. This could lead to attacks against system resources. HappyMall explo vulnerabl...

HappyMall E-Commerce Software 4.34.4 - Normal_HTML.cgi Command Execution

HappyMall E-Commerce Software 4.34.4 - NormalHTML.cgi Command Execution source: https://www.securityfocus.com/bid/7529/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the normalhtml.cgi script. This...

Apache vulnerable to DoS

Overview A remotely exploitable denial-of-service vulnerability exists in the Apache HTTP Server. Exploitation of this vulnerability may allow an attacker to consume all available system resources, resulting in a denial-of-service condition. Description The Apache HTTP Server is a very popular...

Microsoft ISA Server Fragmented Udp Flood Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---- Microsoft ISA Server Fragmented Udp Flood Vulnerability ---- - ---- Type A system resource is exhausted. - ---- Summary A fragmented Udp attack through the microsoft isa server makes the system hampered by using the cpu at 100. Meanwhile server...

Pacific Software Carello 1.2.1 Shopping Cart - Command Execution

source: https://www.securityfocus.com/bid/2729/info It is possible for a remote user to execute arbitrary commands on a host using Carello Shopping Cart software. A specially crafted HTTP request could cause inetinfo.exe to consume all available system resources, refusing any new connections. If...

vCard DoS on Outlook 2000

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability in vCard import in Outlook 2000 Released: August 30, 2000 Summary ======= Under certain conditions, excessively long or malformed fields in a vCard .vcf file can cause Microsoft Outlook 2000 to either overflow or excessively utilize syst...