CVE-2011-1784

CVE-2011-1784 concerns keepalived 1.2.2 and earlier, where pidfile_write creates /var/run/*.pid files (keepalived.pid, checkers.pid, vrrp.pid) with 0666 permissions. This allows local users to write to these PID files and potentially kill arbitrary processes. Connected advisories show that update...

CVE-2011-1784

The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files...

CVE-2011-1784

The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files...

PT-2011-3365

Name of the Vulnerable Software and Affected Versions keepalived versions 1.2.2 and earlier Description The issue allows local users to kill arbitrary processes by writing a PID to certain files. This is due to the pidfile write function using 0666 permissions for the keepalived.pid, checkers.pid...

CVE-2011-1784: Undefined Security Weakness

The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files...

CVE-2011-2147: Undefined Security Weakness

Openswan 2.2.x does not properly restrict permissions for 1 /var/run/starter.pid, related to starter.c in the IPsec starter, and 2 /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a...

PT-2011-1179

Name of the Vulnerable Software and Affected Versions Openswan versions 2.2.x through 2.6.37 Description The issue is related to improper permission restrictions in Openswan, specifically with files /var/run/starter.pid and /var/lock/subsys/ipsec. This could allow local users to kill arbitrary...

win32/xp sp3 Force Kill explorer.exe process Shellcode 73 Bytes

Exploit Title: win32/xp sp3 Force Kill explorer.exe process Shellcode 73 Bytes + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : win32-Shellcodes + Tested on : Windows Xp 32 bit 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Multiple ActiveX components security vulnerabilities

kill bit update for multiple components of different vendors...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

Integer overflow

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

CVE-2011-1137 is an integer overflow in ProFTPD’s mod_sftp that affects 1.3.3d and earlier, triggered by a malformed SSH message and causing memory exhaustion/DoS. The issue is in the mod_sftp code path, with remote attackers able to induce high memory use potentially leading to OOM. Public detai...

Avira AntiVirus QUA File Crash

!/usr/bin/perl ================================================================================= | | Title : Avira AntVir QUA file in avcenter.exe Local Crash PoC | | Author : KedAns-Dz | | email : [email protected] | | Home : HMD/AM 30500/04300 - Algeria -00213555248701 | | Web Site : /-\ ... | ...

Amid Protests, Egypt Severs Ties to Internet

Amidst growing popular protests, Egypt has been severed from the Internet, according to reports from Intenet monitors and reporters within the country. The Associated Press and Reuters both confirmed reports of widespread outtages within Egypt affecting customers of all of the country’s main ISPs...

[DSECRG-00143] SAP Crystal Reports 2008 - ActiveX insecure methods

DSECRG-11-002 Internal DSECRG-00143 SAP Crystal Report Server 2008 scriptinghelpers.dll ActiveX component - Insecure methods The component contains insecure methods by which you can overwrite any file in the OS, run the executable file, kill process, delete the file. Application: SAP Crystal Repo...

MySQL: CREATE TABLE ... SELECT causes crash when KILL_BAD_DATA is returned (MySQL Bug#55826)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service server crash via crafted arguments to extreme-value functions such as 1 LEAST and 2 GREATEST, related to KILLBADDATA and a "CREATE...

Microsoft WMI Administrative Tools ActiveX Control AddContextRef vulnerability

Added: 01/07/2011 CVE: CVE-2010-3973 BID: 45546 OSVDB: 69942 Background Microsoft WMI Administrative Tools is a tool suite containing WMI CIM Studio, WMI Object Browser, WMI Event Registration Tool, and WMI Event Viewer. Problem A vulnerability in the WMI Object Viewer ActiveX control...