CVE-2007-6285

The default configuration for autofs 5 autofs5 in some Linux distributions, such as Red Hat Enterprise Linux RHEL 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special devic...

autofs default doesn't set nodev in /net

The default configuration for autofs 5 autofs5 in some Linux distributions, such as Red Hat Enterprise Linux RHEL 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special devic...

CVE-2007-5159: Undefined Security Weakness

The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions setuid root to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor...

Packeteer PacketWise CLI overflow DoS

Product: Packeteer PacketShaper Model: 9500/ISP Software: PacketWise 8.x possibly others =========== Background =========== Packeteer creates bandwidth management solutions such as the PacketShaper which "is the ultimate scalable platform for optimized WAN application performance—the only...

CVE-2006-2147: Undefined Security Weakness

resmgrd in resmgr for SUSE Linux and other distributions does not properly handle when access to a USB device is granted by using "usb: , " notation, which grants access to all USB devices and allows local users to bypass intended restrictions. NOTE: this is a different vulnerability than...

[SA16969] Linux Kernel URB Handling Denial of Service Vulnerability

TITLE: Linux Kernel URB Handling Denial of Service Vulnerability SECUNIA ADVISORY ID: SA16969 VERIFY ADVISORY: http://secunia.com/advisories/16969/ CRITICAL: Less critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTION: A...

CVE-2002-1835

The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device...

Acrowave AAP-3100AR wireless router unauthorized access

It's possible to acces device without password...

04WebServer multiple bugs

Crossite scripting, DOS device access...

Sophos Small Business Suite special DOS devices access

By using special device name as a filename it's possible to access DOS device and bypass protection...

Multiple NetGear WAB 102 bugs

It's possible to access device with any password containing space, device resets to default password on reboot, information is leaked about wireless devices...

AN HTTPd multiple bugs

Crossite scripting, physical path leakage, special devices access, file corruption...

Multiple bugs in Web602

Directory listing, special device access, administration access...

Multiple bugs in Cisco IP Phones

Differenc DoS attacks scenarios and access to locked devices...

Re: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express

At Wednesday 5/15/2002 03:11 PM +0400, you wrote: Title: Special device access and DoS in Microsoft Internet Exporer/Outlook Express/Outlook All versions of Windows have a reserved filenames referred to special devices such as prn, aux, nul, etc also called DOS devices. This might be related to a...

Re[2]: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express

Dear Chad Loder, You're right! bgsound src=3D"111.111.111.111newfile.wav" causes IE to connect to 111.111.111.111 via NetBT. Depending on LMCompatibilityLevel it may cause user's cleartext password or NTLMv1 challenge to leak. It's very serious bug. --Friday, May 17, 2002, 1:38:16 PM, you wrote t...

dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express

Русская версия этой advisory приведена ниже. Original version of this advisory: http://www.security.nnov.ru/advisories/msiedos.asp Title: Special device access and DoS in Microsoft Internet Exporer/Outlook Express/Outlook Authors: ERRor, 3APA3A Date: May, 14 2002 Affected: Internet Explorer 6.0...

Special device access and DoS in Microsoft Internet Exporer

Title: special device access and DoS in Microsoft Internet Exporer/Outlook Express/Outlook Authors: ERRor, 3APA3A Date: May, 14 2002 Affected: Internet Explorer 6.0 Vendor: Microsoft Risk: Average to high Remote: Yes Exploitable: Yes Vendor notified: April, 24 2002 Intro: All versions of Windows...

Intel D845HV/WN/PT series motherboard vulnerability

Affected systems: Intel D845HV / WN tested on BIOS revisions P05-0022, P09-0035, P10-0038 and D845PT tested on BIOS P01-0012 Pentium 4 motherboards Problem: If the user hits the F8 key during the POST they are presented with a "Please select boot device" dialog, enabling them to boot off of any...

Special DOS-device access in Microsoft Outlook Express

It's possible to hang Outlooks Express by using prn: device as a name for bgsound or iframe. It's also possible to send data to special device...