CVE-2009-4753

The CVE-2009-4753 issue affects the Addonics NAS Adapter NASU2FW41 (loader 1.17) FTP server. It arises from buffer overflows in the FTP service when processing long arguments for XRMD, DELETE, RNFR, and RNTO commands, leading to a denial of service (TCP/IP outage). Documents identify the affected...

Fedora Update for fetchmail FEDORA-2010-3800

Check for the Version of fetchmail OpenVAS Vulnerability Test Fedora Update for fetchmail FEDORA-2010-3800 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 12 Update: samba-3.4.7-58.fc12

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

Fedora Update for samba FEDORA-2010-1190

Check for the Version of samba OpenVAS Vulnerability Test Fedora Update for samba FEDORA-2010-1190 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Microsoft TCP IP Selective Acknowledgement Denial of Service (MS10-009; CVE-2010-0242)

TCP/IP SACK is used for connections with large TCP window sizes. When SACK is enabled, if a packet or series of packets is dropped the receiver can inform the sender of exactly which data has been received and where the holes in the data are. The sender can then selectively retransmit the missing...

Multiple Vendor ICMP Connection Reset Denial of Service (CVE-2004-0790)

The Internet Control Message Protocol ICMP is part of the Internet Protocol suite. ICMP facilitates error, control, and informational message exchange between network devices. For instance, ICMP may be used to test network connectivity between two hosts. There exists a vulnerability in multiple...

Multiple Vendor ICMP Source Quench Denial of Service (CVE-2004-0791)

The Internet Control Message Protocol ICMP is part of the Internet Protocol suite. ICMP facilitates error, control, and informational message exchange between network devices. For instance, ICMP may be used to test network connectivity between two hosts. There exists a vulnerability in multiple...

Microsoft Windows头MDL碎片远程代码执行漏洞（MS10-009）

BUGTRAQ ID: 38062 CVE ID: CVE-2010-0240 Microsoft Windows是微软发布的非常流行的操作系统。 当运行自定义网络驱动时Windows TCP/IP栈没有正确的处理UDP数据包碎片上的特制封装安全负载（ESP），远程攻击者可以通过发送特制报文导致执行任意代码。成功利用这个漏洞要求 Windows所安装的自定义网络驱动将UDP头拆分为多个MDL。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows...

Microsoft Windows TCP/IP栈选择性应答远程拒绝服务漏洞（MS10-009）

BUGTRAQ ID: 38064 CVE ID: CVE-2010-0242 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的TCP/IP栈在处理设置了畸形选择性应答（SACK）值的TCP报文时存在拒绝服务漏洞，远程攻击者可以向目标系统发送少量的特制报文导致受影响的系统停止响应和自动重启。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 SP2 Microsoft Windows...

Microsoft Windows ICMPv6路由信息远程代码执行漏洞（MS10-009）

BUGTRAQ ID: 38063 CVE ID: CVE-2010-0241 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的TCP/IP栈没有对特制的ICMPv6路由信息报文执行正确的边界检查，匿名攻击者可以通过向启用了IPv6功能的计算机发送特制的 ICMPv6路由信息报文触发缓冲区溢出，导致执行任意代码。成功利用这个漏洞要求攻击者与受害用户处于同一物理或虚拟网络链路中。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsof...

Microsoft Windows ICMPv6路由播发缓冲区溢出漏洞（MS10-009）

BUGTRAQ ID: 38061 CVE ID: CVE-2010-0239 Microsoft Windows是微软发布的非常流行的操作系统。 Windows TCP/IP栈在处理特制的ICMPv6路由播发报文时没有执行充分的边界检查，匿名攻击者可以通过向启用了IPv6的计算机发送特制的ICMPv6报文来利用此漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 S...

Update Protection against Microsoft Windows ICMPv6 Router Advertisement Vulnerability (MS10-009)

A remote code execution vulnerability exists in the Windows TCP/IP stack due to insufficient bounds checking when processing specially crafted ICMPv6 Router Advertisement packets. An anonymous attacker could exploit the vulnerability by sending specially crafted ICMPv6 Router Advertisement packet...

CVE-2010-0240

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload ESP over UDP packets, which allows remote attackers to execute arbitrary code...

CVE-2010-0239

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6...

CVE-2010-0242

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...

CVE-2010-0241

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route...

Design/Logic Flaw

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route...

Security feature bypass

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...

Out-of-bounds

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6...

CVE-2010-0242

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...