DEBIAN-CVE-2005-3531

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

CVE-2005-3531

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

CVE-2005-3531

CVE-2005-3531 affects fusermount in the FUSE project (before version 2.4.1). The issue arises when fusermount is installed setuid root and a mount is performed over a directory whose name contains certain special characters, allowing local users to corrupt /etc/mtab and potentially modify mount o...

CVE-2005-3531: Undefined Security Weakness

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

CVE-2005-3531

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

OpenVPN VPN client format string vulnerability

Format string bug on parsing DHCP options obtained from server...

openvpn -- arbitrary code execution on client through malicious or compromised server

James Yonan reports: A format string vulnerability in the foreignoption function in options.c could potentially allow a malicious or compromised server to execute arbitrary code on the client. Only non-Windows clients are affected. The vulnerability only exists if a the client's TLS negotiation...

DEBIAN-CVE-2005-2959

Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the 1 SHELLOPTS and 2 PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are...

security flaw

smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings...

USN-184-1: umount vulnerability

David Watson discovered that "umount -r" removed some restrictive mount options like the "nosuid" flag. If /etc/fstab contains user-mountable removable devices which specify the "nosuid" flag which is common practice for such devices, a local attacker could exploit this to execute arbitrary...

Snort Intrusion detection system DoS

Crash on parsing TCP options in verbose mode...

Snort <= 2.4.0 SACK TCP Option Error Handling Denial of Service Exploit

No description provided by source. /------------------------------------------ ||------+ Snort = 2.4.0 Trigger p0c +------|| |||| ||--= nitrous at vulnfact dot com =--|| ||--= VulnFact Security Labs =--|| ||--= 21 Ago 2oo5 =--|| ||--= Mexico =--|| |||| -- Snort = 2.4.0 SACK TCP Option Error...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service /------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2...

sphpblog_vulns.pl.txt

!/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1 Description: This program is for...

CVE-2004-2315

The vulnerability CVE-2004-2315 affects Mbedthis AppWeb HTTP server prior to version 1.0.2, where a remote attacker can cause a denial of service (crash) by sending an empty OPTIONS request. The provided documents state the issue and affected version but do not include exploit details, root-cause...

CVE-2004-2315: Undefined Security Weakness

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via an empty OPTIONS request...

Wise WinTerm thin client windows terminal DoS

Device crash on zero IP options...

CVE-2005-2482

The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option defanged mode, allows attackers to modify temporary environment variables before the "Defanged" environment option is checked when processing the Exploit command...

CVE-2005-2068

FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session...

CVE-2005-2068: Undefined Security Weakness

FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session...