kernel security and bug fix update

2.6.18-92.1.13.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki orabug 6045759 - splice Fix bad unlockpage in error case Jens Axboe orabug 6263574 - NET fix netpoll race Tina Yang orabugz 5791 2.6.18-92.1.13.el5 - md fix crashes in iteraterdev Doug Ledford 460128 455471 - sound...

ASUS远程控制台DPC代理栈溢出漏洞

BUGTRAQ ID: 28394 ASUS远程控制台（ARC）允许用户监控和控制远程主机。 ARC服务在处理超长的用户请求时存在缓冲溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 ARC服务的主要组件是一个监听于623端口的名为DpcProxy的telnet服务器，可提供IPMI接口。DPC代理用于从客户端所接收数据的函数存在缓冲区溢出漏洞。该函数将所接收的数据存储到了大约1024字节的栈缓冲区，然后检查行分隔符的末尾（回车）。如果用户提交了超长数据的话，就可以触发栈溢出，导致执行任意指令。 0 Asus Remote Console = 2.0.0.24 Asus ----...

RHEL 4 : wireshark (RHSA-2007:0709)

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

wireshark security update

CentOS Errata and Security Advisory CESA-2007:0709 New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the...

Low: Red Hat Security Advisory: wireshark security and bug fix update

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

Default credentials

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-2387

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-2387

The CVE-2007-2387 entry concerns Apple Xserve Lights-Out Management on Intel hardware prior to Firmware Update 1.0. The vulnerability is that IPMI remote access does not require a password, enabling an attacker to gain administrative access via remote requests using ipmitool. Impact is described ...

CVE-2007-2387

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

Apple Xserve Lights-Out管理系统IPMI远程权限提升漏洞

Xserve是苹果推出的高性能服务器。 Xserve内嵌的Lights-Out管理固件实现IPMI时存在错误，可能允许远程攻击者在以特殊方式配置了IPMI的服务器上获得管理权限。 Apple Xserve Lights-Out Management Firmware 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=14051&cat=1&platform=osx&method=sa/LOMUpdate.dmg...

Intel Enterprise Southbridge 2 Baseboard Management Controller unauthorized access

It's possible to connect to server mothreboard control module and execute IPMI command without authentication...

Design/Logic Flaw

Intel Enterprise Southbridge 2 Baseboard Management Controller BMC, Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management...

CVE-2007-0661

Summary of CVE-2007-0661 : Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC) and related Intel Server Boards (5000XAL, S5000PAL/S5000PSL/S5000XVN/S5000VCL/S5000VSA/SC5400RA) plus OEM firmware, prior to 20070119, are affected when IPMI is enabled. The vulnerability allows remote...

CVE-2007-0661

Intel Enterprise Southbridge 2 Baseboard Management Controller BMC, Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management...

Important: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system...

Moderate: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 3

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the third regular update. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Linux kernel handles the basic...

CVE-2004-2600

The CVE-2004-2600 entry concerns firmware for Intel IPMI 1.5-based server boards/platforms. The vulnerability stems from an Authentication Type Enables parameter being set to an invalid None value, which could allow remote attackers to obtain sensitive information when LAN management is enabled. ...

CVE-2004-2600

The firmware for Intelligent Platform Management Interface IPMI 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is...

CVE-2004-2600

The firmware for Intelligent Platform Management Interface IPMI 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is...