344 matches found
Mitsubishi FX3GC PLC Detection
Binary data 751775.prm...
radare2 denial of service vulnerability (CNVD-2018-12204)
Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the rstrbuffini function in radare2 2.5.0. The vulnerability is...
Allen Bradley Micrologix 1400 Series B Unauthenticated Data/Program/Function File Improper Access Control Vulnerability
Summary An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive...
CVE-2009-2846
The eisaeepromread function in the parisc isa-eeprom component drivers/parisc/eisaeeprom.c in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read ...
Flaw in Intel Ethernet controller exposes to 'packet of death' attack
The hardware qualification is a very important issue, recent vulnerabilities discovered in network appliances of various manufacturer have alerted security community once again on the necessity to validate the hardware especially for large consume product. The last news is related to a...
Persistent BIOS Infection (Устойчивый BIOS inj)
------ 0.- Предисловие Уважаемые пользователи, если вы читаете эту статью, мы можем предположить, что вы уже знаете, что такое BIOS и как он работает. Или, по крайней мере, вы имеете общtе представление о том, что делает BIOS, и его значение для нормальной работы компьютера. Основываясь на этом,...
Debian DSA-1872-1 : linux-2.6 - denial of service/privilege escalation/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to denial of service, privilege escalation or a leak of sensitive memory. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2698 Herbert Xu discovered an issue in the way U...
CVE-2009-2846
The eisaeepromread function in the parisc isa-eeprom component drivers/parisc/eisaeeprom.c in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read ...
Out-of-bounds
The eisaeepromread function in the parisc isa-eeprom component drivers/parisc/eisaeeprom.c in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read ...
CVE-2009-2846
CVE-2009-2846 affects the eisa_eeprom_read function in the parisc isa-eeprom driver (drivers/parisc/eisa_eeprom.c) of the Linux kernel prior to 2.6.31-rc6. A negative ppos argument bypasses a positive-ppos check, leading to an out-of-bounds read in readb and allowing local users to access restric...
CVE-2009-2846
The eisaeepromread function in the parisc isa-eeprom component drivers/parisc/eisaeeprom.c in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read ...
Code injection
The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...
CVE-2006-1538
The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...
CVE-2006-1538
The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...
CVE-2006-1538
The CVE-2006-1538 case concerns the Enova X-Wall ASIC, where a key is obtained via Microwire from a serial EEPROM that stores the key in cleartext. This enables local users with physical access to extract the key by reading/duplicating the EEPROM on a hardware token, or by sniffing the Microwire ...
Enova cryptograpic chip protection bypass
Encryption key is stored in EEPROM...
APC 9606 SmartSlot Web/SNMP management card "backdoor"
Background: APC American Power Conversion SmartSwitch and UPS uninterruptible power supply products have a Web and SNMP management card installed that permits local serial console, TELNET, web and SNMP management, monitoring and mains power control of attached devices. The Problem: APC SmartSlot...
apc_9606_backdoor.txt
Background: APC American Power Conversion SmartSwitch and UPS uninterruptible power supply products have a Web and SNMP management card installed that permits local serial console, TELNET, web and SNMP management, monitoring and mains power control of attached devices. The Problem: APC SmartSlot...
CVE-1999-1192
CVE-1999-1192 describes a buffer overflow in the EEPROM handling of Solaris 2.5.1 and earlier. The overflow permits local users to gain root privileges by crafting a long command-line argument. The vulnerability is local and affects Solaris systems prior to or including 2.5.1, with a CVSS base sc...