kernel: scsi: aacraid: double fetch in ioctl_send_fib()

A race condition flaw was found in the ioctlsendfib function in the Linux kernel's aacraid implementation. A local attacker could use this flaw to cause a denial of service out-of-bounds access or system crash by changing a certain size value...

DSA-3659-1 linux - security update

Bulletin has no description...

Oracle: Security Advisory (ELSA-2007-0347)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[Nield v0.5.0] Network Interface Events Logging Daemon

nieldNetwork Interface Events Logging Daemon is a tool that receives notifications from the kernel through the netlink socket, and generates logs related to interfaces, neighbor cache ARP,NDP, IP address IPv4,IPv6, routing, FIB rules, traffic control.It can be configured using command-line option...

UBUNTU-CVE-2013-6431

The fib6add function in net/ipv6/ip6fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging the CAPNETADMIN capability for an IPv6 SIOCADDRT ioctl call...

CVE-2009-3135

Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File...

CVE-2009-3135

Microsoft Word Remote Code Execution (CVE-2009-3135) affects Word 2002 SP3, Word 2003 SP3, Word 2004/2008 for Mac, Open XML File Format Converter for Mac, Word Viewer 2003 SP3, and Word Viewer. The vulnerability is a stack-based buffer overflow in Word’s File Information Block (FIB) parsing, whic...

Microsoft Word记录解析栈溢出漏洞（MS09-068）

BUGTRAQ ID: 36950 CVE ID: CVE-2009-3135 Word是微软Office套件中的文件处理工具。 Word处理包含有畸形文件信息块（FIB）结构的特制Word文件的方式中存在栈溢出。成功利用此漏洞的攻击者可以完全控制受影响的系统，攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word Viewer 200...

CVE-2009-0418

The IPv6 Neighbor Discovery Protocol NDP implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity, read private network traffic, and possibly execute...

fib_semantics.c out of bounds access vulnerability

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTAMAX to be used as an array size instead of RTNMAX, which leads to an "out of bound access" by the 1 dnfibprops dnfib.c, DECNet and 2 fibprops fibsemantics.c, IPv4 functions...

SOL9528 - IPv6 Neighbor Discovery Protocol (NDP) vulnerability - CVE-2008-2476 - VU#472363

The IPv6 Neighbor Discovery Protocol NDP implementation does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity or read private network traffic by way of a spoofed message that modifies the Forward Information Ba...

CORE-2008-0228: Microsoft Word Malformed FIB Arbitrary Free Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Microsoft Word Malformed FIB Arbitrary Free Vulnerability 1. Advisory Information Title: Microsoft Word Malformed FIB Arbitrary Free Vulnerability Advisory ID:...

CVE-2008-4024

Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block FIB, which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory...

Microsoft Word Malformed FIB Arbitrary Free Vulnerability

Advisory ID Internal CORE-2008-0228 1. Advisory Information Title: Microsoft Word Malformed FIB Arbitrary Free Vulnerability Advisory ID: CORE-2008-0228 Advisory URL:https://www.coresecurity.com/core-labs/advisories/word-arbitrary-free Date published: 2008-12-10 Date of last update: 2008-12-10...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.0. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Sql injection

The IPv6 Neighbor Discovery Protocol NDP implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity or read private network traffic via a spoofed message that modifies the Forwa...

Design/Logic Flaw

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

CVE-2008-4404

The IPv6 Neighbor Discovery Protocol NDP implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity or read private network traffic via a spoofed message that modifies the Forwa...

IPv6 implementations insecurely update Forwarding Information Base

Overview A vulnerability in some implementations of the IPv6 Neighbor Discovery Protocol may allow a nearby attacker to intercept traffic or cause congested links to become overloaded. Description IPv6 networks use the Neighbor Discovery Protocol NDP to detect and locate routers and other on-link...

Microsoft Word文件信息块内存破坏漏洞（MS08-009）

BUGTRAQ ID: 27656 CVECAN ID: CVE-2008-0109 Word是微软Office办公软件套件中的文字处理工具。 Word在解析文件信息块（FIB）中的某些字段时存在内存破坏漏洞，如果用户受骗打开了特制的DOC文档的话，就可能触发这个漏洞，导致执行任意指令。 Microsoft Word 2003 SP2 Microsoft Word 2002 SP3 Microsoft Word 2000 SP3 临时解决方法： 在打开未知或不可信任来源的文件时，使用Microsoft Office隔离转换环境（MOICE）。 使用Microsoft...