Debian Security Advisory DSA 336-1 (kernel-source-2.2.20, kernel-image-2.2.20-i386)

The remote host is missing an update to kernel-source-2.2.20, kernel-image-2.2.20-i386 announced via advisory DSA 336-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MS Windows Vista forged ARP packet Network Stack DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================ MS Windows Vista forged ARP packet Network Stack DoS Exploit ============================================================ !/usr/bin/env python :: Kristian Hermansen :: Date: 20070514...

VMWare guest system weak permissions

Unprivileged user of guest system with VMWare tools installed can perform some privileged operations, such enabling/disabling network interface...

Yamaha MusicCAST MCX-1000 wireless network interface operates in Access Point mode by default

Overview The Yamaha MusicCAST MCX-1000 server wireless networking interface is enabled by default, cannot be disabled, and operates in Access Point mode. A remote attacker could access the MusicCAST wireless network and potentially any other network connected to the MusicCAST. Description The...

CVE-2005-1099

Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon GLD 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code...

DEBIAN-CVE-2005-1099

Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon GLD 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code...

CVE-2004-1502

The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service socket exhaustion via a Telnet request to an IP address of the proxy's network interface, which causes a loop...

UML_Utilities User-Mode Linux - uml_utilities 20030903 UML_Net Slip Network Interface Denial of Service

source: https://www.securityfocus.com/bid/12016/info The umlutilites umlnet application may permit unprivileged malicious local users to shut down the slip network interface. This is due to the program being installed setuid root by default. This vulnerability could be exploited to deny network...

Debian DSA-442-1 : linux-kernel-2.4.17-s390 - several vulnerabilities

Several security related problems have been fixed in the Linux kernel 2.4.17 used for the S/390 architecture, mostly by backporting fixes from 2.4.18 and incorporating recent security fixes. The corrections are listed below with the identification from the Common Vulnerabilities and Exposures CVE...

TCP Connection Reset Remote Exploit

No description provided by source. / By: Paul A. Watson Build a TCP packet - based on tcp1.c sample code from libnet-1.1.1 COMPILE: gcc reset-tcp.c -o reset-tcp /usr/lib/libnet.a or gcc -o reset-tcp reset-tcp.c -lnet be sure to modify the MAC addresses enetsrc/enetdst in the code, or you WILL hav...

TCP Connection Reset - Remote Denial of Service

/ By: Paul A. Watson Build a TCP packet - based on tcp1.c sample code from libnet-1.1.1 COMPILE: gcc reset-tcp.c -o reset-tcp /usr/lib/libnet.a or gcc -o reset-tcp reset-tcp.c -lnet be sure to modify the MAC addresses enetsrc/enetdst in the code, or you WILL have problems! EXECUTE: reset-tcp...

Microsoft Windows Vista - ARP Table Entries Denial of Service

source: https://www.securityfocus.com/bid/23266/info Microsoft Windows Vista is prone to a denial-of-service vulnerability. Remote attackers may exploit this issue by submitting malicious ARP requests to the vulnerable computer. To exploit this issue, attackers must have access to the local netwo...

jailed processes can manipulate host routing tables

A programming error resulting in a failure to verify that an attempt to manipulate routing tables originated from a non-jailed process. Jailed processes running with superuser privileges could modify host routing tables. This could result in a variety of consequences including packets being sent...

Sharp Zaurus SL-5500 upgrade ROM v3.1 - serious Samba issue

The Sharp Zaurus is a linux-based PDA running Embedix. In the May version of the Sharp Zaurus newsletter, version 3.1 of the flash ROM was announced with various new versions of software and added OS functionality. The linux kernel went from 2.4.6 to 2.4.18. The Zaurus docking station comes with ...

Important: Red Hat Security Advisory: : New kernel 2.2 packages fix vulnerabilities

Updated kernel packages for Red Hat Linux 6.2 and 7.0 are now available that fix several security vulnerabilities. The Linux kernel handles the basic functions of the operating system. A bug in the kernel module loader code allows a local user to gain root privileges. The Common Vulnerabilities a...

CVE-2003-0019

umlnet in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode...

CVE-2003-0001

Multiple ethernet Network Interface Card NIC device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak...

Etherleak: Ethernet frame padding information leakage (A010603-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Etherleak: Ethernet frame padding information leakage Release Date: 01/06/2003 Application: Ethernet device driver software Platform: Multiple Severity: Information disclosure Authors: Ofir...

Network device drivers reuse old frame buffer data to pad packets

Overview Many network device drivers reuse old frame buffer data to pad packets, resulting in an information leakage vulnerability that may allow remote attackers to harvest sensitive information from affected devices. Description The Ethernet standard IEEE 802.3 specifies a minimum data field si...

CVE-2002-1976

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKETMRPROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap...