Linux Kernel RTL8169 NIC远程拒绝服务漏洞

Bugraq ID: 35281 CVE ID：CVE-2009-1389 CNCVE ID：CNCVE-20091389 Linux是一款开放源代码的操作系统。 Linux RTL8169驱动存在设计错误，远程攻击者可以利用漏洞使内核触发OOPs，导致拒绝服务攻击。 RTL8169 GigE卡默认配置MTU为1500字节，发送单个包超过1500字节的报文，可导致驱动处理时破坏内核内存，造成OOPs。 Linux kernel 2.6.30 rc6 Linux kernel 2.6.30 -rc5 Linux kernel 2.6.30 -rc3 Linux kernel 2.6.30...

RHEL 5 : kernel (RHSA-2009:0225)

Updated kernel packages that fix three security issues, address several hundred bugs and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the third regular update. This update has been rated as having importa...

Debian Security Advisory DSA 332-1 (kernel-source-2.4.17, kernel-patch-2.4.17-mips)

The remote host is missing an update to kernel-source-2.4.17, kernel-patch-2.4.17-mips announced via advisory DSA 332-1. OpenVAS Vulnerability Test $Id: deb3321.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 332-1 Authors: Thomas Reinke Copyright: Copyrigh...

Fedora 7 : xen-3.1.0-6.fc7 (2007-2270)

Fixes a security flaw in pygrub handling of config files and a denial-of-service case in ne2k NIC for QEMU. Fixes the case of disappearing network cards in fully-virtualized guests. NB, it only fixes it for guests created after this errata is installed & XenD restarted. Any pre-existing guests ma...

Fedora Core 6 : xen-3.0.3-12.fc6 (2007-713)

Fixes a security flaw in pygrub handling of config files and a denial-of-service case in ne2k NIC for QEMU. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

CVE-2005-4082

The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conduct other attacks...

CVE-2005-4082

Consolidated details for CVE-2005-4082 show: the dhcp.client program on QNX 4.25 vmware is setuid, reportedly by default, enabling local users to modify NIC configuration and potentially carry out additional attacks. This denotes a local-privilege issue stemming from a setuid binary. The availabl...

CVE-2005-4082

The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conduct other attacks...

QNX 4.25 suided dhcp.client binary

Hello all, I recently got a QNX 4.25 vmware image and i found that the dhcp.client shipped with it is suided. This obviously enables a normal user to control the NIC's configuration and produce some other attacks eg: if the system has some services which depend on 'host/ip based' authentication...

ARPSniffer get the highest permissions-bug warning-the black bar safety net

Suppose you want to attack the host IP is:61.139.1.79 The same subnet the next, we have the right to limit the host IP is:61.139.1. 8 8 and 3 3 8 9 landing The first step: tracert 61.139.1.1 C:\WIN2000\system32tracert 61.139.1.1 Tracing route to HACK-4FJ7EARC 61.139.1.1 over a maximum of 3 0 hops...

[Full-disclosure] NIC Chile CGI Script Zone Transfers

NIC Chile CGI Script Zone Transfers. Autor: Rodrigo Gutierrez rodrigo at intellicomp.cl Affected: All ".cl" domains which use NIC's Chile Secondary NS. Vendor url: http://www.nic.cl Rate: Critical Background. NIC Chile is a part of the University of Chile and is in charge of handling all the...

DSA-442 linux-kernel-2.4.17-s390 - several vulnerabilities

Bulletin has no description...

Etherleak information leak in Windows Server 2003 drivers

NGSSoftware Insight Security Research Advisory Name: Etherleak information leak in Windows Server 2003 drivers Systems Affected: Windows Server 2003 all versions Severity: Low/Medium Risk Vendor URL: http://www.microsoft.com/windowsserver2003/ Author: Chris Paget [email protected] Date: 9th...

CVE-2003-0001

The CVE-2003-0001 issue, known as Etherleak, is an information-disclosure vulnerability caused by NIC/device drivers not padding Ethernet frames with null bytes, allowing an adjacent attacker to glimpse memory content from previously transmitted packets. Connected documents show this vulnerabilit...