Heartbeat claster software multiple DoS conditions

shmget shared memory section call weak permissions. remote DoS on heartbeat network messages parsing...

CVE-2007-3380

The Distributed Lock Manager DLM in the cluster manager for Linux kernel 2.6.15 allows remote attackers to cause a denial of service loss of lock services by connecting to the DLM port, which probably prevents other processes from accessing the service...

USN-489-2: redhat-cluster-suite vulnerability

USN-489-1 fixed vulnerabilities in the Linux kernel. This update provides the corresponding fixes for the redhat cluster suite kernel sources. Original advisory details: A flaw was discovered in the cluster manager. A remote attacker could connect to the DLM port and block further DLM operations...

USN-489-1: Linux kernel vulnerabilities

A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...

Linux kernel multiple security vulnerabilities

DoS with cluster manager, DoS with usblcd driver, DoS with VFAT IOCTL...

CVE-2007-3775

CVE-2007-3775 affects Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS). The available documents describe an unspecified vulnerability that allows remote attackers to cause a denial of service (loss of cluster services). The exact vulnerable comp...

cman security update

CentOS Errata and Security Advisory CESA-2007:0559 Updated cman packages that correct a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. cman is the Red Hat Cluster Manager. A fla...

RHEL 5 : cman (RHSA-2007:0559)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0559 advisory. cman is the Red Hat Cluster Manager. A flaw was found in the cman daemon. A local attacker could connect to the cman daemon and trigger a static buff...

Important: Red Hat Security Advisory: cman security update

Updated cman packages that correct a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. cman is the Red Hat Cluster Manager. A flaw was found in the cman daemon. A local attacker...

possible buffer overflow could cause local DoS by crashing cman

Buffer overflow in cluster/cman/daemon/daemon.c in cman redhat-cluster-suite before 20070622 allows local users to cause a denial of service crash and possibly execute arbitrary code via long client messages...

Buffer overflow

Buffer overflow in cluster/cman/daemon/daemon.c in cman redhat-cluster-suite before 20070622 allows local users to cause a denial of service crash and possibly execute arbitrary code via long client messages...

CVE-2007-3374

CVE-2007-3374 concerns a buffer overflow in the cman daemon (cluster/cman/daemon/daemon.c) of the Red Hat Cluster Suite (cman). The flaw allows a local attacker to crash the service and, potentially, execute arbitrary code via lengthy client messages. Public records from RHSA-2007:0559 and relate...

CVE-2007-3374

Buffer overflow in cluster/cman/daemon/daemon.c in cman redhat-cluster-suite before 20070622 allows local users to cause a denial of service crash and possibly execute arbitrary code via long client messages...

CVE-2007-3373

CVE-2007-3373 affects daemon.c in cman (redhat-cluster-suite) prior to 20070622, where a buffer is not cleared when reading requests. This may allow local users to obtain sensitive information from previous requests. The NVD entry lists a Medium base score (5.0) with Network attack vector and Low...

CVE-2007-3373

daemon.c in cman redhat-cluster-suite before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests...

Redhat Linux cluster service multiple security vulnerabilities

Uninitialized memory, buffer oveflows...

[email protected], [email protected]

=========================================================== Ubuntu Security Notice USN-476-1 June 22, 2007 redhat-cluster-suite vulnerability https://launchpad.net/bugs/121780 =========================================================== A security issue affects the following Ubuntu releases: Ubunt...

USN-476-1: redhat-cluster-suite vulnerability

Fabio Massimo Di Nitto discovered that cman did not correctly validate the size of client messages. A local user could send a specially crafted message and execute arbitrary code with cluster manager privileges or crash the manager, leading to a denial of service...

Sun Cluster软件本地拒绝服务漏洞

Sun Cluster将Solaris操作环境推广到一种集群操作系统。 Sun Cluster的实现上存在漏洞，本地攻击者可能利用此漏洞导致拒绝服务。 如果Sun Cluster节点上的特权用户为当前集群的成员的话，就能够破坏同一层集群节点的内存中数据结构，这可能导致系统忙碌和/或破坏同一层节点上的数据，影响应用程序的吞吐量或最终用户的数据或应用程序的可用性，具体取决于Sun Cluster的配置方式。 如果触发上述漏洞，可能出现数据破坏和sendmondo忙碌，栈追踪类似于： genunix:cdevioctl did:didioctl specfs:specioctl pxfs:vo...

Code injection

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...