Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

The CMWAP of the test-vulnerability warning-the black bar safety net

Author: demonalex Source: demonalex the diary of a madman 1 test ARP. The first test is the BAN of inspiration, in the CMWAP under the ARP test, but through the GPRS into the CMWAP is the PPP Protocol with the ARP in different Protocol stacks, so the ARP in GPRS connected to the CMWAP is not...

Design/Logic Flaw

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing...

CVE-2008-0640

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing...

Analysis of a known as any arp firewall test Software-bug warning-the black bar safety net

Skiller in the Ph4nt0m | Google Groups released a known as you can through any arp is a firewall test software. Software description: First of all, this is a demo version with the full version the only difference is does not have the traffic detection function, because in the network if there are...

Apple OS X Software Update Remote Command Execution

--------------------------------------------------------------------- Apple Mac OS X Software Update Remote Command Execution Vulnerability Copyright c 2007 Moritz Jodeit [email protected] 2007/12/17 --------------------------------------------------------------------- I. Vulnerability Descriptio...

Fedora 8 : squid-2.6.STABLE17-1.fc8 (2007-4170)

Thu Dec 6 2007 Martin Nagy - 2.6.STABLE17-1 - upgrade to latest upstream 2.6.STABLE17 - Mon Nov 12 2007 Martin Bacovsky - 7:2.6.STABLE16-3 - squid is compiled wirh arp acls support --enable-arp-acl Note that Tenable Network Security has extracted the preceding description block directly from the...

Cisco Aironet Wireless Access Points Memory Exhaustion ARP Attack DoS

No description provided by source. // // Cisco Killer - ciskill.c // // Usage: ./ciskill device // // Author: Pasv pasvninja at gmail.com // // Credit: This exploit takes advantage of a vulnerability that was // discovered by Eric Smith on January 12, 2006 bid:16217 //...

Guidance EnCase Enterprise uses weak authentication to identify target machines

Overview Guidance Software's EnCase Enterprise uses IP authentication to identify target machines. An attacker may be able to provide the EnCase SAFE server with a disk image from a different machine than an investigator requested. Description Guidance Software's EnCase Enterprise allows...

CVE-2007-5087

The ATM module in the Linux kernel before 2.4.35.3, when CLIP support is enabled, allows local users to cause a denial of service kernel panic by reading /proc/net/atm/arp before the CLIP module has been loaded...

Code injection

The ATM module in the Linux kernel before 2.4.35.3, when CLIP support is enabled, allows local users to cause a denial of service kernel panic by reading /proc/net/atm/arp before the CLIP module has been loaded...

CVE-2007-4733

The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet, a related issue to...

Buffer overflow

Buffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows local users to gain root privileges...

CVE-2007-4011

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller WLC software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service traffic amplification or ARP storm via a crafted unicast ARP request that 1...

Design/Logic Flaw

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller WLC software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service traffic amplification or ARP storm via a crafted unicast ARP request that 1...

Code injection

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller WLC software 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service ARP storm via a broadcast ARP packet that "targets the IP address of a known client context", aka CSCsj50374...

CVE-2007-4012

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller WLC software 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service ARP storm via a broadcast ARP packet that "targets the IP address of a known client context", aka CSCsj50374...

CVE-2007-4011

CVE-2007-4011 affects Cisco 4100/4400, Airespace 4000, and Catalyst 6500/3750 WLC software. The vulnerability permits remote DoS (traffic amplification or ARP storm) via crafted unicast ARP requests. Impact arises when the destination MAC is unknown to Layer-2 infrastructure (CSCsj69233) or durin...

blarp.txt

!/usr/bin/perl kokanin@gmail dot com 20070604 ARP dos, makes the target windows pc unusable for the duration of the attack. determines if we send directly or via broadcast, bcast seems to be more effective works even when printing info locally Why store mac addresses for addresses outside ones...

Cisco无线LAN控制器ARP风暴多个拒绝服务漏洞

BUGTRAQ ID: 25043 Cisco无线LAN控制器（WLC）可在轻型接入点和其他无线提供LAN控制器之间提供实时通讯，以执行集中的系统范围WLAN配置和管理功能。 WLC在处理单播ARP通讯时存在漏洞，移动组无线LAN控制器之间的LAN链路可能会充满单播ARP请求。 有漏洞的WLC可能错误地处理无线客户端的单播ARP请求，导致ARP风暴。附着到同组2层VLAN的两个WLC必须均拥有无线客户端环境才会暴露这个漏洞。在使用3层（跨子网）漫游后或使用访客WLAN（auto-anchor）时会出现这种情况。...