[SA19017] FreeBSD "nfsd" NFS Mount Request Denial of Service

TITLE: FreeBSD "nfsd" NFS Mount Request Denial of Service SECUNIA ADVISORY ID: SA19017 VERIFY ADVISORY: http://secunia.com/advisories/19017/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: FreeBSD 6.x http://secunia.com/product/6778/ DESCRIPTION: Evgeny Legerov has...

FreeBSD 6.0 (nfsd) Remote Kernel Panic Denial of Service Exploit

No description provided by source. !/usr/bin/perl Saw an advisory on Dailydave and wrote a little script to check my freebsd boxes kind of evil. /str0ke milw0rm.com ProtoVer NFS testsuite 1.0 uncovered remote kernel panic vulnerability in FreeBSD 6.0 kernel. Evgeny Legerov www.gleg.net use...

FreeBSD 6.0 - 'nfsd' Remote Kernel Panic (Denial of Service)

!/usr/bin/perl Saw an advisory on Dailydave and wrote a little script to check my freebsd boxes kind of evil. /str0ke milw0rm.com ProtoVer NFS testsuite 1.0 uncovered remote kernel panic vulnerability in FreeBSD 6.0 kernel. Evgeny Legerov www.gleg.net use IO::Socket; sub usage print "FreeBSD 6.0...

FreeBSD 6.0 (nfsd) Remote Kernel Panic Denial of Service Exploit

Exploit for bsd platform in category dos / poc ================================================================ FreeBSD 6.0 nfsd Remote Kernel Panic Denial of Service Exploit ================================================================ !/usr/bin/perl Saw an advisory on Dailydave and wrote a...

security flaw

Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VMIO flag, which causes incorrect reference counts and may lead to a denial of service kernel panic when accessing freed kernel pages...

Ubuntu 4.10 / 5.04 : linux-source-2.6.10, linux-source-2.6.8.1 vulnerabilities (USN-178-1)

Oleg Nesterov discovered a local Denial of Service vulnerability in the timer handling. When a non group-leader thread called exec to execute a different program while an itimer was pending, the timer expiry would signal the old group leader task, which did not exist any more. This caused a kerne...

Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-38-1)

CAN-2004-0814 : Vitaly V. Bursov discovered a Denial of Service vulnerability in the 'serio' code; opening the same tty device twice and doing some particular operations on it caused a kernel panic and/or a system lockup. Fixing this vulnerability required a change in the Application Binary...

CVE-2002-2197

CVE-2002-2197 affects Sun Solaris 8.0. A local user can trigger a kernel panic by running a program that uses /dev/poll, causing a NULL pointer dereference in the kernel. The provided connected documents confirm the vulnerable component and the root cause (NULL pointer dereference via /dev/poll),...

security flaw

The iptrecent kernel module iptrecent.c in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service kernel panic via certain attacks such as SSH brute force, which leads to memset calls using a length based on the uint32t...

security flaw

Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs...

CVE-2005-1913

CVE-2005-1913 affects the Linux kernel up to version 2.6.12.1. The vulnerability occurs when a non group-leader thread executes a different program while an itimer is pending; the expiry signal is delivered to the old group-leader task, which no longer exists, causing a kernel panic (local DoS). ...

USN-178-1: Linux kernel vulnerabilities

Oleg Nesterov discovered a local Denial of Service vulnerability in the timer handling. When a non group-leader thread called exec to execute a different program while an itimer was pending, the timer expiry would signal the old group leader task, which did not exist any more. This caused a kerne...

CVE-2002-1912

SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service null pointer exception and kernel panic via a large number of packets...

CVE-2002-1674

procfs on FreeBSD before 4.5 allows local users to cause a denial of service kernel panic by removing a file that the fstatfs function refers to...

CVE-2002-1674

CVE-2002-1674 affects FreeBSD procfs prior to 4.5. The vulnerability arises when a local user removes a file that the kernel’s fstatfs function refers to, potentially causing a kernel panic (local DoS). The provided documents do not include concrete exploit details or remediation steps.

[SA15722] OpenBSD "ip_ctloutput()" Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-0969

Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via crafted parameters...

CVE-2005-0969

Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via crafted parameters...

CVE-2005-0969

CVE-2005-0969 affects Mac OS X prior to 10.3.9: a heap-based buffer overflow in the syscall emulation functionality allows local users to trigger a denial of service (kernel panic) and potentially execute arbitrary code via crafted parameters. Remediation documented in Mac OS X 10.3.9; users shou...

CVE-2003-1064

CVE-2003-1064 affects Solaris 8 with IPv6 enabled. A crafted IPv6 packet can trigger a kernel panic, causing a denial of service. Documented in NVD/CVE listings with a CVSS v2 base score of 5.0 (Network, low complexity, no authentication, partial availability impact). No remediation details are p...