setsockopt(2) IPv6 sockets input validation error

From the FreeBSD Security Advisory: A programming error in the handling of some IPv6 socket options within the setsockopt2 system call may result in memory locations being accessed without proper validation. It may be possible for a local attacker to read portions of kernel memory, resulting in...

FreeBSD-SA-04:06.ipv6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:06.ipv6 Security Advisory The FreeBSD Project Topic: setsockopt2 IPv6 sockets input validation error Category: core Module: kernel Announced: 2004-03-29...

Mabry Software FTPServerX 1.0 - Controls Format String

Mabry Software FTPServerX 1.0 - Controls Format String source: https://www.securityfocus.com/bid/9402/info It has been reported that FTPServer/X may be prone to a remote format string vulnerability when processing a malicious request from a client. The vulnerability presents itself when the serve...

HD Soft Windows FTP Server 1.5/1.6 - 'Username' Format String

// source: https://www.securityfocus.com/bid/9385/info It has been reported that Windows FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client. The vulnerability presents itself when the server receives a malicious request containing...

CVE-2003-1289

The iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to 5.1-RELEASE-p1 allows local users to read portions of kernel memory memory disclosure via a large length parameter, which copies additional kernel memory into userland memory...

[Full-Disclosure] FreeBSD Security Advisory FreeBSD-SA-03:17.procfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:17.procfs Security Advisory The FreeBSD Project Topic: kernel memory disclosure via procfs Category: core Module: sys Announced: 2003-10-03 Credits: Joost Pol...

[Full-Disclosure] PINE-CERT-20030902: Integer Overflow in FreeBSD Kernel [uio]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------------- Pine Digital Security Advisory - ------------------------------------------------------------------------------- Advisory ID : PINE-CERT-20030902 Authors : Joost Pol...

NetBSD Security Advisory 2003-013: Kernel memory disclosure via ibcs2

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2003-013 ================================= Topic: Kernel memory disclosure via ibcs2 Version: NetBSD-current: source prior to August 7, 2002 NetBSD 1.6.1: not affected NetBSD 1.6: not affected NetBSD-1.5.3: affected NetBSD-1.5.2: affecte...

Microsoft Windows XP - TCP Packet Information Leakage

source: https://www.securityfocus.com/bid/8531/info A vulnerability has been discovered in Microsoft Windows XP that could result in the contents of memory being disclosed within some TCP packets. The problem specifically occurs within some SYN packets transmitted by Windows XP, which may not hav...

Microsoft Windows XP - TCP Packet Information Leakage

Microsoft Windows XP - TCP Packet Information Leakage source: https://www.securityfocus.com/bid/8531/info A vulnerability has been discovered in Microsoft Windows XP that could result in the contents of memory being disclosed within some TCP packets. The problem specifically occurs within some SY...

PHP 4.x - DLOpen Memory Disclosure (2)

PHP 4.x - DLOpen Memory Disclosure 2 // source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may...

PHP 4.x - DLOpen Memory Disclosure (1)

PHP 4.x - DLOpen Memory Disclosure 1 // source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may...

PHP 4.x - DLOpen Memory Disclosure (2)

// source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit this issue to gain unauthorized...

PHP 4.x - DLOpen Memory Disclosure (1)

// source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit this issue to gain unauthorized...

Kernel memory disclosure via ibcs2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:10.ibcs2 Security Advisory The FreeBSD Project Topic: Kernel memory disclosure via ibcs2 Category: core Module: sys Announced: 2003-08-10 Credits: David Rhodus...

FreeBSD-SA-03:10.ibcs2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:10.ibcs2 Security Advisory The FreeBSD Project Topic: Kernel memory disclosure via ibcs2 Category: core Module: sys Announced: 2003-08-10 Credits: David Rhodus...

Cisco IOS 101112 - UDP Echo Service Memory Disclosure

Cisco IOS 101112 - UDP Echo Service Memory Disclosure source: https://www.securityfocus.com/bid/8323/info It has been reported that under some circumstances, a Cisco appliance running IOS may answer malicious malformed UDP echo packets with replies that contain partial contents from the affected...

Cisco IOS 10/11/12 - UDP Echo Service Memory Disclosure

source: https://www.securityfocus.com/bid/8323/info It has been reported that under some circumstances, a Cisco appliance running IOS may answer malicious malformed UDP echo packets with replies that contain partial contents from the affected router's memory...

xfstt 1.2/1.4 - Memory Disclosure

source: https://www.securityfocus.com/bid/8255/info xfstt is reported to be prone to an unspecified memory disclosure vulnerability. This issue can be triggered by remote attackers to cause a denial of service. The server may also return details about the memory layout of the underlying system wh...

xfstt 1.21.4 - Memory Disclosure

xfstt 1.21.4 - Memory Disclosure source: https://www.securityfocus.com/bid/8255/info xfstt is reported to be prone to an unspecified memory disclosure vulnerability. This issue can be triggered by remote attackers to cause a denial of service. The server may also return details about the memory...