Linux Kernel: Remote DoS vulnerability with IPTables TCP Handling

Background The Linux kernel is responsible for managing the core aspects of a GNU/Linux system, providing an interface for core system applications as well as providing the essential structure and capability to access hardware that is needed for a running system. Description An attacker can utili...

CVE-2004-0674: Undefined Security Weakness

Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service crash via a packet with the IP record route option set...

Enterasys XSR DoS

Router crashes on packet with RR option...

CVE-2004-0615: Undefined Security Weakness

Cross-site scripting XSS vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request...

PT-2004-1707 · D Link · D-Link Di-624 +2

Name of the Vulnerable Software and Affected Versions: D-Link DI-614+ SOHO router version 2.30 D-Link DI-704 SOHO router version 2.60B2 D-Link DI-624 affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote...

Microsoft Internet Explorer 6 - HREF Save As Denial of Service

Microsoft Internet Explorer 6 - HREF Save As Denial of Service source: https://www.securityfocus.com/bid/10552/info A vulnerability is reported to exist in Internet Explorer that may allow an attacker to cause the application to crash. The issue presents itself when a user attempts to invoke the...

Record Route

It is possible to obtain the traceroute to the remote host by sending packets with the 'Record Route' option set. It is a complement to traceroute. C Tenable Network Security, Inc. References: RFC 792 Internet Control Message Protocol RFC 791 Internet Protocol include"compat.inc"; ifdescription...

PT-2004-1607 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 10.3.3 on Mac OS Description: The issue concerns an argument injection vulnerability in the SSH URI handler for Safari. This vulnerability allows remote attackers to execute arbitrary code via the ProxyCommand option ...

CVE-2004-0050: Undefined Security Weakness

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as 1 NUL, 2 CON, 3 AUX, 4 COM1, 5 COM2, and others...

rsync update

New rsync packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue. When running an rsync server without the chroot option it is possible for an attacker to write outside of the allowed directory. Any sites running rsync in that mode should upgrade right away and...

DSA-499 rsync - directory traversal

Bulletin has no description...

[Full-Disclosure] Linux kernel setsockopt MCAST_MSFILTER integer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: Linux kernel setsockopt MCASTMSFILTER integer overflow Product: Linux kernel Version: 2.4.22 - 2.4.25, 2.6.1 - 2.6.3 Vendor: http://www.kernel.org/ URL: http://isec.pl/vulnerabilities/isec-0015-msfilter.txt Author: Paul Starzetz...

CVE-2004-0148

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...

CVE-2004-0148

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...

clamav shell characters

Shell characters problem in filename if f option is used...

PT-2004-1496 · Texas Imperial · Wftpd Pro Server

Name of the Vulnerable Software and Affected Versions: WFTPD Pro Server version 3.21 Release 1 Description: The issue allows local users to cause a denial of service, resulting in a crash, by utilizing specific commands. This can be achieved via a 1 MKD or 2 XMKD command that causes an absolute...

CVE-2003-0368

CVE-2003-0368 affects the Nokia Gateway GPRS Support Node (GGSN, IP650-based). The issue allows a remote attacker to trigger a kernel panic/DoS by sending a malformed IP packet containing a TCP option 0xFF. Impact is a restart of the GGSN and disruption of connectivity. Mitigation provided by Nok...

CVE-2003-0368

Nokia Gateway GPRS support node GGSN allows remote attackers to cause a denial of service kernel panic via a malformed IP packet with a 0xFF TCP option...

CVE-2003-0368: Improper Input Validation

Nokia Gateway GPRS support node GGSN allows remote attackers to cause a denial of service kernel panic via a malformed IP packet with a 0xFF TCP option...

CVE-2003-1306

Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information server name and version via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response...