CVE-2014-3019

IBM BladeCenter SAS Connectivity Module aka NSSM and SAS RAID Module aka RSSM before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session...

CVE-2014-3018

CVE-2014-3018 affects IBM BladeCenter SAS Connectivity Module (NSSM) and SAS RAID Module (RSSM). The issue allows a remote attacker to cause a denial of service (reboot) by sending a flood of IP packets. IBM/SecurityBulletin entries indicate RSSM versions 1.3.3.004 and earlier are affected; NSSM ...

Cisco Aironet DHCP Denial of Service Vulnerability

A vulnerability in the DHCP subsystem of Cisco Aironet access points could allow an unauthenticated, adjacent attacker to create a denial of service condition. The vulnerability is due to an error condition that may occur when very short DHCP leases are in use. If an attacker can prevent the acce...

Cisco IOS Software Ethernet Connectivity Fault Management (CFM) DoS

The remote Cisco device is affected by a denial of service vulnerability due to due to improper parsing of malformed Ethernet Connectivity Fault Management CFM packets. A remote, unauthenticated attacker, using specially crafted CFM packets, could trigger a denial of service condition, resulting ...

TigerVNC: User-assisted execution of arbitrary code

Background TigerVNC is a high-performance VNC server/client. Description Two boundary errors in TigerVNC could lead to a heap-based buffer overflow. Impact A remote attacker could entice a user to connect to a malicious VNC server using TigerVNC, possibly resulting in execution of arbitrary code...

Moderate: Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update

Updated openstack-neutron packages that fix one security issue, several bugs, and add multiple enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A...

Cyberespionage: 'This Isn't a Problem That Can Be Solved'

WASHINGTON–Gentlemen may not read each other’s mail, as Henry Stimson famously said so long ago, but in today’s world they certainly steal it and there’s precious little in the way of gentlemanly conduct happening in the realm of cyberespionage. It’s every man—or country—for himself in this...

CVE-2014-3409

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

Command injection

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

CVE-2014-3409

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

Aztech DSL5018EN / DSL705E / DSL705EU DoS / Broken Session Management

PRODUCT DESCRIPTION The Aztech ADSL family of modems/routes are shipped to residential and SOHO users that desires speed from 150-300mbps rate. This modem/router also supports IEEE802.11b/g/n as a Wireless LAN Access point. The vulnerable model numbers are: DSL5018EN 1T1R Shipped with Globe Telec...

How to Use Windows Management Instrumentation (WMI) Tester [WBEMTest] to Test WMI Connectivity

Purpose This article documents how to use Windows Management Instrumentation WMI Tester WBEMTest to test connectivity, which can assist in troubleshooting and isolating WMI-related issues with Veeam products. Solution Opening Windows Management Instrumentation WMI Tester 1. Open a Run prompt. Pre...

Moscrack v2.08b - Multifarious On-demand Systems Cracker (cracking WPA keys in parallel on a group of computers)

Moscrack is a perl application designed to facilitate cracking WPA keys in parallel on a group of computers. This is accomplished by use of either Mosix clustering software, SSH or RSH access to a number of nodes. With Moscrack's new plugin framework, hash cracking has become possible. SHA256/512...

CVE-2014-3890

Affected product : Silex SX-2000WG devices with firmware before 1.5.4. Vulnerability : remote attacker can cause a denial of service (connectivity outage) by sending a crafted IP packet (CVE-2014-3890). Impact : DoS leading to loss of connectivity. Root cause / vector : handling of IP packets in ...

JVN#35998716: SX-2000WG vulnerable to denial-of-service (DoS)

SX-2000WG provided by silex technology, Inc. is a product that provides wireless connectivity for USB devices such as printers and hard disk drives HDD. SX-2000WG contains an issue in the processing of IP packets, which may cause a denial-of-service DoS. Impact A remote attacker may cause the...

JVN#85571806: SX-2000WG vulnerable to denial-of-service (DoS)

SX-2000WG provided by silex technology, Inc. is a product that provides wireless connectivity for USB devices such as printers and hard disk drives HDD. SX-2000WG contains an issue in the processing of TCP Option header, which may cause a denial-of-service DoS. Impact A remote attacker may cause...

Microsoft Windows NT 4/2000 NetBIOS Name Conflict Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1514/info An attacker can send the NetBIOS name service a NetBIOS Name Conflict message even when the receiving machine is not in the process of registering its NetBIOS name. The target will then not attempt to use that...

Check Point Software Firewall-1 3.0/1.4.0/1.4.1 Spoofed Source Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/1419/info If Checkpoint Firewall-1 receives a number of spoofed UDP packets with Source IP = Destination IP, the firewall and likely the machine hosting it crashes. NOTE: This vulnerability while being posted to Bugtraq i...

U.S. Robotics USR808054 Wireless Access Point Web Administration Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10840/info The USR808054 wireless access point is reported to contain a denial of service vulnerability in its embedded web server. When malicious requests are received by the device, it will reportedly crash, denying...

MySQL AB ODBC Driver 3.51 Plain Text Password Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8245/info A vulnerability has been reported in the MySQL AB ODBC Open Data Base Connectivity driver implementation. The MySQL ODBC driver reportedly stores plain text credentials used to connect to the specified database ...