openSUSE 10 Security Update : heartbeat (heartbeat-2139)

This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. CVE-2006-3815,CVE-2006-3121 %NASLMINLEVEL 70300 C Tenable Network...

CVE-2007-4205: Undefined Security Weakness

XHA Linux-HA on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service heartbeat control process crash via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121...

TS-2007-001-0: BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability

Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability Date: 2007-07-29 Advisory ID: TS-2007-001-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details...

Heartbeat claster software multiple DoS conditions

shmget shared memory section call weak permissions. remote DoS on heartbeat network messages parsing...

Mandrake Linux Security Advisory : heartbeat (MDKSA-2006:142)

Two vulnerabilities in heartbeat prior to 2.0.6 was discovered by Yan Rong Ge. The first is that heartbeat would set insecure permissions in an shmget call for shared memory, allowing a local attacker to cause an unspecified denial of service via unknown vectors CVE-2006-3815. The second is a...

CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

DEBIAN-CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

L2TPNS Heartbeat处理拒绝服务漏洞

l2tpns处理超大"心跳"包存在问题，可导致拒绝服务攻击。 目前没有详细漏洞细节提供。 l2tpns l2tpns 2.1 l2tpns l2tpns 2.0.13 l2tpns l2tpns 1.1 升级程序： l2tpns l2tpns 1.1 l2tpns l2tpns-2.1.21.tar.gz http://downloads.sourceforge.net/l2tpns/l2tpns-2.1.21.tar.gz l2tpns l2tpns 2.0.13 l2tpns l2tpns-2.1.21.tar.gz...

Linux-HA Heartbeat Insecure Default Permissions on Shared Memory Vulnerability

No description provided by source. / Intruders Tiger Team Security http://www.intruders.org.br/ Heartbeat 2.0.6 Insecure Shared Memory - Local Denial of Service. Credits: Yan Rong Ge, see link below: http://secunia.com/advisories/21162/ Tested on Heartbeat 2.0.5. Thanks for Wendel Guglielmetti,...

Debian DSA-1151-1 : heartbeat - out-of-bounds read

Yan Rong Ge discovered out-of-boundary memory access in heartbeat, the subsystem for High-Availability Linux. This could be used by a remote attacker to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-1128-1 : heartbeat - permission error

Yan Rong Ge discovered that wrong permissions on a shared memory page in heartbeat, the subsystem for High-Availability Linux could be exploited by a local attacker to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

GLSA-200608-23 : Heartbeat: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200608-23 Heartbeat: Denial of Service Yan Rong Ge discovered that the peelnetstring function in clnetstring.c does not validate the 'length' parameter of user input, which can lead to an out-of-bounds memory access when processin...

DEBIAN-CVE-2006-3121

The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...

CVE-2006-3121

The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...

CVE-2006-3121

The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...

CVE-2006-3121

The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...

CVE-2006-3121: Undefined Security Weakness

The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...

USN-335-1: heartbeat vulnerability

Yan Rong Ge discovered that heartbeat did not sufficiently verify some packet input data, which could lead to an out-of-boundary memory access. A remote attacker could exploit this to crash the daemon Denial of Service...

[SECURITY] [DSA 1151-1] New heartbeat packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1151-1 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2006 http://www.debian.org/security/faq -...