TCP/IP协议堆栈存在未明远程拒绝服务漏洞

BUGTRAQ ID:31545 CNCAN ID：CNCAN-2008100310 网络核心TCP/IP协议实现存在一个未明安全问题，可导致触发拒绝服务攻击。 根据CERT-FI报告，漏洞是存在于目标主机上的TCP连接队列相关问题上，通过相对较小数量的网络流量可导致拒绝服务攻击。根据CERT-FI评估，此漏洞可以通过基于源地址级的过滤来屏蔽此漏洞的攻击。 此漏洞细节将于2008年10月17日公布，根据报告此问题影响多个供应商的TCP/IP堆栈的实现。 IETF RFC 1123: Requirements for Internet Hosts Applicat IETF RFC 112...

DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit

Hi --------------------------------- http://www.dataconline.com/software/realwin.php "RealWin is a SCADA server product which includes a FlexView HMI and runs on current Microsoft Windows platforms 2000 and XP. It can operate on a single PC or multiple PCs connected through a TCP/IP network. It...

[SECURITY] Fedora 9 Update: samba-3.2.3-0.20.fc9

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

HP TCP/IP Services for OpenVMS Finger客户端格式串漏洞

BUGTRAQ ID: 30948 CNCAN ID：CNCAN-2008090303 HP OpenVMS是一款HP Integrity或AlphaServer服务器中使用的操作系统。 HP OpenVMS finger客户端存在格式串问题，远程攻击者可以利用漏洞对应用程序权限执行任意指令。 HP OpenVMS finger客户端不正确过滤输入，构建特殊的格式串作为参数数据，可导致内存破坏攻击，造成拒绝服务或者任意代码执行攻击。 HP TCP/IP Services for OpenVMS 5.3 HP TCP/IP Services for OpenVMS 5.6 HP TCP/I...

Design/Logic Flaw

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...

CVE-2008-3946

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...

CVE-2008-3946

The CVE-2008-3946 entry affects the finger client in HP TCP/IP Services for OpenVMS 5.x. The vulnerability enables local users to read arbitrary files by requesting a link corresponding to a .plan or a .project file. This is a local, low-complexity issue with complete confidentiality impact on th...

CVE-2008-3946

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...

CVE-2008-3940

Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a 1 .plan or 2 .project file...

Format string

Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a 1 .plan or 2 .project file...

CVE-2008-3940

Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a 1 .plan or 2 .project file...

CVE-2008-3940

CVE-2008-3940 describes a format string vulnerability in the finger client of HP TCP/IP Services for OpenVMS 5.x. Local users can gain privileges by supplying crafted content in either the ".plan" or the ".project" file, exploiting format string specifiers. The vulnerability affects the finger cl...

FreeBSD Security Advisory (FreeBSD-SA-04:04.tcp.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:04.tcp.asc ADV FreeBSD-SA-04:04.tcp.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-02:20.syncache.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-02:20.syncache.asc ADV FreeBSD-SA-02:20.syncache.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Security Advisory (FreeBSD-SA-06:08.sack.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:08.sack.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-02:20.syncache.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-02:20.syncache.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Input validation

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

[SECURITY] Fedora 8 Update: fetchmail-6.3.8-4.fc8

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

[SECURITY] Fedora 9 Update: fetchmail-6.3.8-7.fc9

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

Multiple Vendor SNMPv3 HMAC Handling Authentication Bypass (CVE-2008-0960)

Simple Network Management Protocol SNMP is an application layer protocol that is part of the Transmission Control Protocol/Internet Protocol TCP/IP protocol suite. SNMP allows administrators to remotely manage network devices made by many different vendors, including servers, workstations, router...