Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RHEL 5 : kernel (RHSA-2009:0326)

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RedHat Security Advisory RHSA-2009:0360

The remote host is missing updates announced in advisory RHSA-2009:0360. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. These updated packages address the following security issues: a memory leak exists in keyctl handling. A local, unprivileged user could...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel-rt packages contain the Linux kernel, the core of any Lin...

Sun Java System Identity Manager多个安全漏洞

BUGTRAQ ID: 34191 Sun Java System Identity Manager是一个完整的端到端的保护敏感数据和管理标识配置文件与许可的解决方案。 Sun Java System Identity Manager（IdM）受多个安全漏洞影响，具体如下： 由于没有使用SSL加密某些连接，远程非特权用户可以非授权访问客户端与IdM服务器之间所传输的数据（17763）。 本地或远程非特权用户可以判断是否存在有效的IdM帐号名（18052，18104）。 在IdM服务器上拥有帐号的用户可以更改其他IdM帐号的口令（18578）。...

Addonics NAS Adapter Post-Auth DoS

Remote: Yes Local: No Credit: Michael Cyr Vulnerable: R3282-1.33c LOADER32 1.15, NASU2FW41 Loader 1.17 Not Vulnerable: Discussion: Addonics NAS Adapter Post-Auth DoS Addonics NAS Adapter is prone to several post authentication buffer overflows. Each of these buffer overflows will crash the entire...

Addonics NAS Adapter 'nas.cgi'缓冲区溢出漏洞

BUGTRAQ ID: 34054 CNCAN ID：CNCAN-2009031001 Addonics NAS Adapter是一款增加任意USB存储设备到LAN的解决方案。 Addonics NAS Adapter 'nas.cgi'存在多个缓冲区溢出，远程攻击者可以利用漏洞可能以应用程序进程权限执行任意代码。 提交超长字符串作为'nas.cgi'中参数的数据，可触发缓冲区溢出。精心构建提交数据，可以应用程序权限进程执行任意代码。 Addonics NAS Adapter R3282-1.33c Addonics NAS Adapter NASU2FW41 目前没有解决方案提供：...

Addonics NAS Adapter - (Authenticated) Denial of Service

Addonics NAS Adapter - Authenticated Denial of Service !/bin/bash Addonics NAS Adapter Post-Auth DoS Tested against R3282-1.33c LOADER32 1.15, and NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a...

Addonics NAS Adapter Post-Auth Denial of Service Exploit

Exploit for hardware platform in category dos / poc ======================================================== Addonics NAS Adapter Post-Auth Denial of Service Exploit ======================================================== !/bin/bash Addonics NAS Adapter Post-Auth DoS Tested against R3282-1.33c...

Addonics NAS Adapter - (Authenticated) Denial of Service

!/bin/bash Addonics NAS Adapter Post-Auth DoS Tested against R3282-1.33c LOADER32 1.15, and NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a GET, and bye bye baby! Greetz to muts and loganWHD, I...

Ralinktech wireless adapter driver integer overflow

Integer overflow on oversized SSID...

D-Link VoIP Phone Adapter XSRF / XSS

D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be used for csrf bypass:...

D-Link VoIP Phone Adapter - Cross-Site Scripting / Cross-Site Request Forgery Remote Firmware Overwrite

D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be used for csrf bypass:...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit

Exploit for hardware platform in category remote exploits ================================================== Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit ================================================== Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XS...

D-Link VoIP Phone Adapter - Cross-Site Scripting Cross-Site Request Forgery Remote Firmware Overwrite

D-Link VoIP Phone Adapter - Cross-Site Scripting Cross-Site Request Forgery Remote Firmware Overwrite D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be...

Integer overflow

Integer overflow in Ralink Technology USB wireless adapter RT73 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Probe Request packet with a long SSID,...

CVE-2009-0282

Integer overflow in Ralink Technology USB wireless adapter RT73 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Probe Request packet with a long SSID,...

CVE-2009-0282

Integer overflow in Ralink Technology USB wireless adapter RT73 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Probe Request packet with a long SSID,...

CVE-2009-0282

Integer overflow in Ralink Technology USB wireless adapter RT73 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Probe Request packet with a long SSID,...

CVE-2009-0282

CVE-2009-0282 describes an integer overflow in multiple Ralink wireless drivers (RT73 3.08 for Windows and Linux drivers rt2400, rt2500, rt2570, rt61) when processing a Probe Request with a long SSID, likely related to integer signedness. This can allow a remote attacker to crash the system and, ...