Security Advisory- Y.1731 Vulnerability on Some Huawei Switches

Y.1731 is an ITU-T recommendation for OAM features on Ethernet-based networks. Y.1731 provides connectivity detection, diagnosis, and performance monitoring for VLAN/VSI services on MANs. Some Huawei switches support Y.1731 and therefore, has the Y.1731 vulnerability in processing special packets...

Multiple Vulnerabilities in Cisco Wireless LAN Controllers (cisco-sa-20140305-wlc)

The remote Cisco Wireless LAN Controller WLC is affected by one or more of the following vulnerabilities : - Errors exist related to the handling of specially crafted ethernet 802.11 frames that could allow denial of service attacks. CSCue87929, CSCuf80681 - An error exists related to the handlin...

Cisco Wireless LAN Controller远程拒绝服务漏洞(CVE-2014-0706)

BUGTRAQ ID: 65985 CVECAN ID: CVE-2014-0706 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller没有正确处理 Ethernet 802.11 帧，未经身份验证的远程攻击者可触发关键错误，造成拒绝服务。 0 Cisco Wireless LAN Controller 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20140305-wlc）以及相应补丁:...

Cisco Wireless LAN Controller远程拒绝服务漏洞(CVE-2014-0707)

BUGTRAQ ID: 65986 CVECAN ID: CVE-2014-0707 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller没有正确处理 Ethernet 802.11 帧，未经身份验证的远程攻击者可触发关键错误，造成拒绝服务。 0 Cisco Wireless LAN Controller 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20140305-wlc）以及相应补丁:...

CVE-2014-0707

CVE-2014-0707 affects Cisco Wireless LAN Controller (WLC) devices in versions 7.2, 7.3, and 7.4 prior to 7.4.110.0. The vulnerability allows remote attackers to cause a denial of service (device restart) by sending a crafted 802.11 Ethernet frame. Root cause is related to how WLC handles these fr...

MICROSENS Profi Line Switch 10.3.1 - Privilege Escalation

MICROSENS Profi Line Modular Industrial Switch Web Manager version 10.3.1 suffers from a privilege escalation vulnerability. title: Privilege escalation vulnerability product: MICROSENS Profi Line Modular Industrial Switch Web Manager MS652119PM vulnerable version: Firmware version 10.3.1 fixed...

[EtherApe] A graphical network monitor

EtherApe is a graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display. It supports Ethernet, FDDI, Token Ring, ISDN, PPP, SLIP and WLAN...

Siemens Fixes Authentication Bugs in Scalance X-200 Switches

Researchers have discovered two serious vulnerabilities in industrial Ethernet switches manufactured by Siemens that could enable attackers to perform unauthorized actions on the switches without authentication. One of the bugs allows attackers to hijack Web sessions and the other enables them to...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20131121)

This update fixes the following security issues : - A flaw was found in the way the Linux kernel's IPv6 implementation handled certain UDP packets when the UDP Fragmentation Offload UFO feature was enabled. A remote attacker could use this flaw to crash the system or, potentially, escalate their...

TP-Link TD-8840t - Cross-Site Request Forgery

TP-Link TD-8840t - Cross-Site Request Forgery Exploit Title: TP-Link TD-8840t CSRF Vulnerability Author: MOHAMMED AL-SAGGAFLEGNED-SEIYUN E-mail: [email protected]/mohammed.alsaggaf2010 Category: Hardware Google Dork: N/A Vendor: http://www.tp-link.com Firmware Version:...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2013:1645 Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 6. This is the fifth regul...

XADV-2013006 FreeBSD <= 10 kernel qlxge/qlxgbe Driver IOCTL Multiple Kernel Memory Leak Bugs

XADV-2013006 FreeBSD = 10 kernel qlxge/qlxgbe Driver IOCTL Multiple Kernel Memory Leak Bugs 1. Overview The qlxge Driver is Qlogic 10Gb Ethernet Driver for Qlogic 8100 Series CNA Adapter 1. The qlxgbe for the QLogic 8300 series of the same ethernet driver. The qlxge/qlxgbe Driver in freebsd = 10...

wireshark: Infinite and large loops in ANSI MAP, ASF, IEEE 802.11, IEEE 802.3, and LTP dissectors (wnpa-sec-2012-08)

Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service infinite loop via vectors related to the 1 ANSI MAP, 2 ASF, 3 IEEE 802.11, 4 IEEE 802.3, and 5 LTP dissectors...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix two security issues, one bug, and add two enhancements are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

ESXi 5.0 < Build 515841 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.0 host is affected by the following security vulnerabilities : - A security bypass vulnerability exists in the e1000 driver in the Linux kernel due to improper handling of Ethernet frames that exceed the MTU. An unauthenticated, remote attacker can exploit this, via...

CVE-2013-2058

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

DEBIAN-CVE-2013-2058

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

Design/Logic Flaw

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

CVE-2013-2058

The CVE-2013-2058 issue affects the Linux kernel prior to 3.7.4, specifically the host_start function in drivers/usb/chipidea/host.c. Affected code does not properly handle a certain non‑streaming option, enabling a local attacker to trigger a denial of service (system crash) by sending a large a...

CVE-2013-2058

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...