CVE-2017-7560

CVE-2017-7560 concerns the rhnsd daemon. Multiple connected documents reiterate that pid files are created world-writable, enabling a local attacker to fill disks or kill selected processes. This is a local-risk issue with impact on availability, as described in the sources. The provided document...

Guest triggerable qemu MSI-X pass-through error messages

ISSUE DESCRIPTION Device model code dealing with guest PCI MSI-X interrupt management activities logs messages on certain supposedly invalid guest operations. IMPACT A buggy or malicious guest repeatedly invoking such operations may result in the host disk to fill up, possibly leading to a Denial...

LogToServer action lets anyone log messages to the server log

Available without authentication. This can be used to hide breakin attempts or fill the disk if no log rotation is in place...

LogToServer action lets anyone log messages to the server log

Available without authentication. This can be used to hide breakin attempts or fill the disk if no log rotation is in place...

OmniHTTPd visadmin.exe Malformed URL DoS

It is possible to fill the hard disk of a server running OmniHTTPd by issuing the request : http://omni.server/cgi-bin/visadmin.exe?user=guest This allows an attacker to crash your web server. This script checks for the presence of the faulty CGI, but does not execute it. %NASLMINLEVEL 70300 C...