[RHSA-2002:206-12] New kernel fixes local security issues

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel fixes local security issues Advisory ID: RHSA-2002:206-12 Issue date: 2002-09-23 Updated on: 2002-10-15 Product: Red Hat Linux Keywords: Cross references: Obsoletes:...

Cisco Security Advisory: Cisco VPN 3000 Concentrator Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator Multiple Vulnerabilities Revision 1.0 For Public Release 2002 September 03 at 1500 UTC ---------------------------------------------------------------------- Contents Summary Affected Products Detai...

Multiple bugs in different hardware

No description provided...

Microsoft Outlook Express 5.5 - Denial of Service Device Denial of Service

source: https://www.securityfocus.com/bid/4584/info A denial of service issue has been reported in Microsoft Outlook Express. Reportedly, Outlook Express does not adequately handle unusually crafted HTML mail messages. Modifying the BGSOUND or IFRAME tag to contain a URL pointing to a DOS device,...

nCipher Security Advisory #2: SNMP vulnerabilities

SUMMARY ======= SNMP agents supplied by nCipher, as well as those required to run other nCipher SNMP aupport software, could be vulnerable to buffer overflow attacks including denial of service and privilege elevation. BACKGROUND ========== nCipher supplies a range of Hardware Security Modules HS...

Zero One Tech (ZOT) P100s PrintServer and SNMP

Background: The ZOT P100s is a hardware printserver device allowing sharing of a parallel printer on a standard UTP network. It has embedded telnet, http among others and provides information via SNMP with default community read string. have not tried write yet. Problem: After connecting to the...

PT-2001-2103 · Valicert · Valicert Enterprise Validation Authority (Eva) Administration Server

Name of the Vulnerable Software and Affected Versions: ValiCert Enterprise Validation Authority EVA Administration Server versions 3.3 through 4.2.1 Description: The issue arises from the use of insufficiently random data. This affects two main areas: 1 the generation of session tokens for HSMs,...

3Com TelnetD

I noticed that there are infinity retries and no delay enabled at 3Com hardware, so I wrote this little Telnetcracker for this problem. I send it to 3Com, but I think they weren't bothered much about that. They sended me a notice to provide hardware serial and my name etc. ....strange... = This...

CVE-2001-1291

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing...

CVE-2001-1347

Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes...

Security Advisory: Catalyst 5000 Series 802.1x Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Catalyst 5000 Series 802.1x Vulnerability ============================================================================= Revision 1.0 For Public Release 2001 April 16 at 1500 UTC...

Intel InBusiness eMail Station 1.4.87 - Denial of Service

Intel InBusiness eMail Station 1.4.87 - Denial of Service source: https://www.securityfocus.com/bid/1844/info A buffer overflow exists in the Intel InBusiness eMail Station, a dedicated email device. When attempting to establish a connection, the username submitted to the device is not properly...

Cisco CDP attacks

Folks, when playing around with CDP, I discovered several interesting things. Due the leak of Cisco hardware around here, I ask you for your expiriences. Details as follows: Program: http://www.phenoelit.de/irpas/cdp.c Known effekts: -IOS 11.11: when flooding the cisco with random deviceID update...

Hardware Exploit - Gets network Down

Subject: Allegro-Software-RomPager/2.10 vulnerable to Dos Attack Risk: Serious! Timescape / Advisory TS002 ------------------------------------------- Allegro-Software-RomPager is an http server which is used in network hardware like switches to provide a web interface to remotely configure your...

Allegro RomPager 2.10 - URL Request Denial of Service

Allegro RomPager 2.10 - URL Request Denial of Service Allegro's RomPager is reported prone to a remote denial of service vulnerability. If a specifically-malformed request is sent to Allegro's RomPager, it will crash, often crashing the parent device as well. In this manner, network hardware and...

Linux news 15.04.00

Corel выпустит Linux-версии CorelDraw и PhotoPaint раньше, чем планировалось Компания Corel активизировала разработку ПО для Linux и сообщила, что Linux-версии ее графических пакетов CorelDraw и PhotoPaint будут выпущены уже в июне, на два месяца раньше, чем ожидалось. Более того, недавняя покупк...

nt4+sp4+ras.pptp.DoS.txt

Possible DOS in WinNT RAS PPTP Simon Helson [email protected] Tue, 27 Apr 1999 09:29:06 -0700 Please excuse if this has been posted before, I did a quick search of the archives and found nothing This hasn't been sent to MS, as I don't know an email address to send it to, Aleph, if you find it...

3com-nmc-tch.txt

Date: Mon, 21 Dec 1998 11:23:57 -0800 From: Entropy Reply-To: Bugtraq List To: [email protected] Subject: Fwd: Re: 3com The software that 3com has developed for running the NMC network management card for the Total Control Hubs is a bit shady. After uploading the software as one must do YOU wi...

cobalt.raq.txt

Date: Thu, 25 Feb 1999 07:59:30 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Teenager Finds Web-server hole. Forwarded From: William Knowles http://www.wired.com/news/printversion/technology/story/18109.html?wnpg=all Wired.com 2.25.99 A 17-year-old Pennsylvania high school student has...

compaq.insight.manager.server.txt

Date: Wed, 26 May 1999 16:41:36 +0100 From: [email protected] To: [email protected] Subject: Infosec.19990526.compaq-im.a Infosec Security Vulnerability Report No: Infosec.19990526.compaq-im.a ===================================== Vulnerability Summary --------------------- Problem:...