kernel security update

CentOS Errata and Security Advisory CESA-2005:472 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

Ethereal <= 0.10.10 (dissect_ipc_state) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================================================== Ethereal / / / / From the Ethereal Security Advisory 19 : / / http://www.ethereal.com/appnotes/enpa-sa-00019.html / / / / "The SMB dissector could cause a segmentation faul...

CVE-2001-1428

The 1 FTP and 2 Telnet services in Beck GmbH IPC@Chip are shipped with a default password, which allows remote attackers to gain unauthorized access...

CVE-2001-1428

The CVE-2001-1428 entry concerns Beck GmbH IPC@Chip where the FTP and Telnet services ship with a default password, enabling remote attackers to gain unauthorized access. The underlying issue is a default credential disclosure in core services, leading to potential partial confidentiality, integr...

CVE-2001-1428: Undefined Security Weakness

The 1 FTP and 2 Telnet services in Beck GmbH IPC@Chip are shipped with a default password, which allows remote attackers to gain unauthorized access...

CVE-2001-0749

The CVE-2001-0749 issue affects Beck IPC GmbH IPC@CHIP Embedded-Webserver. The vulnerability allows remote attackers to read arbitrary files because the web server default root directory is set to the system root ("/"), enabling access to files outside the web root (e.g., chip.ini with login cred...

CVE-2001-0749

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root...

CVE-2001-0749: Undefined Security Weakness

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root...

CVE-2001-1340

Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service...

CVE-2001-1337

The CVE-2001-1337 entry concerns Beck IPC GmbH IPC@CHIP Embedded-Webserver. Reported impact is a remote denial of service triggered by a long HTTP request. The available information does not specify affected versions, exact vulnerable component or root cause details, nor any published exploitable...

CVE-2001-1338

CVE-2001-1338 affects Beck IPC GmbH IPC@CHIP TelnetD server. The service responds differently for valid vs. invalid login names, enabling remote attackers to enumerate accounts. The TelnetD daemon allows unlimited login attempts, facilitating brute-force credential guessing and potential unauthor...

CVE-2001-1339

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect after bad passwords, enabling brute‑force password guessing from the network. The affected component is the IPC@CHIP telnet service; no delay on failed logins is the root cause. Impact is described with high/critical severities in...

CVE-2001-1340

Beck GmbH IPC@Chip TelnetD service is affected. The TelnetD accepts only a single connection and does not disconnect a user who does not complete login, enabling an attacker to lock out the administrator by remaining idle at a login prompt. This vulnerability stems from a missing login timeout an...

CVE-2001-1341

CVE-2001-1341 concerns Beck GmbH IPC@Chip embedded web server, where the default installation includes the chipcfg.cgi CGI. A crafted request to chipcfg.cgi can cause the server to disclose sensitive network configuration data, enabling remote attackers to obtain confidential information. The iss...

CVE-2001-1337

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request...

CVE-2001-1338

Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system...

CVE-2001-1340

Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service...

CVE-2001-1337: Undefined Security Weakness

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request...

CVE-2001-1340: Undefined Security Weakness

Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service...

CVE-2001-1341: Undefined Security Weakness

The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program...