vorbis: integer overflow in partvals computation

Integer overflow in residue partition value aka partvals evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow...

CVE-2008-1431

RaidSonic NAS-4220-B with 2.6.0-n2007-10-11 firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key...

raidsonic nas-4220 crypt disk key leak (stored in plain on unencrypted partition)

Manufacturer: RaidSonic www.raidsonic.de Device: NAS-4220-B Firmware: 2.6.0-n2007-10-11 Device Type: end user grade NAS box OS: Linux 2.6.15 Architecture: ARM Designed by: Storm Semiconductor Inc www.storlinksemi.com Problem: Hard disk encryption key stored in plain on unencrypted partition. Time...

raidsonic-disclose.txt

Manufacturer: RaidSonic www.raidsonic.de Device: NAS-4220-B Firmware: 2.6.0-n2007-10-11 Device Type: end user grade NAS box OS: Linux 2.6.15 Architecture: ARM Designed by: Storm Semiconductor Inc www.storlinksemi.com Problem: Hard disk encryption key stored in plain on unencrypted partition. Time...

Memory corruption

Unspecified vulnerability in IO Storage Family in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service system shutdown or execute arbitrary code via a disk image with crafted GUID partition maps, which triggers memory corruption...

Moderate: Red Hat Security Advisory: conga security, bug fix, and enhancement update

Packages have been updated to include PowerPC and xenU packages. Updated conga packages that fix a security flaw, several bugs, and add enhancements are now available for Red Hat Cluster Suite. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Th...

Guidance EnCase fails to detect more than 25 partitions

Overview Guidance Software's EnCase Forensic can only detect the first 25 partitions on a volume. Description Guidance Software's EnCase Forensic is a tool that allows an investigator to acquire and analyze a disk image. EnCase names partitions either c: through z:, with an additional partition...

CVE-2003-1524

PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could allow local users to access data on another user's PGP partition...

CVE-2003-1524

PGPi PGPDisk 6.0.2i does not unmount a PGP partition when Windows XP switch-user is used, potentially allowing a local attacker to access data on another user’s PGP partition. Affected component: PGPDisk partition handling. Root cause: failure to unmount on session switch. Impact: local confident...

CVE-2007-4201

Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow remote attackers to prevent examination of certain data, a related issue to CVE-2007-4035...

Design/Logic Flaw

Guidance Software EnCase does not properly handle 1 certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; 2 NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain...

CVE-2007-4035

Guidance Software EnCase does not properly handle 1 certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; 2 NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain...

CVE-2007-4035

Guidance Software EnCase does not properly handle 1 certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; 2 NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain...

MDKA-2006:065 : hal

A bug in partition detection for some SD/MMC card readers those using the sdhci driver was preventing correct detection by HAL, breaking automatic mounting/unmounting on card insertion/removal. Another bug was preventing correct mounting of LUKS-encrypted removable media. This update fixes these...

XSec-06-05.txt

Advisory ID: XSec-06-05 Advisory Name: VMware 5.5.1 for Windows arbitrary partition table delete issue. Release Date: 08/16/2006 Tested on: VMware 5.5.1 build-19175 on Windows Server 2000/2003 Affected version: VMware 5.5.1 Author: nop http://www.xsec.org Overview: On running windows system, you...

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete http://www.xsec.org Overview: On running windows system, you can't delete, format and change system dirver. \ VMware register a COM Object use for Virtual Disk, but it's very danger. \ I don't know how to name this issue. If you allow...

VMware 5.5.1 COM Object Arbitrary Partition Table Delete Exploit

Exploit for unknown platform in category dos / poc ================================================================ VMware 5.5.1 COM Object Arbitrary Partition Table Delete Exploit ================================================================ http://www.xsec.org Overview: On running windows...

VMware 5.5.1 COM Object Arbitrary Partition Table Delete Exploit

No description provided by source. !-- XSec-06-05: VMware 5.5.1 for Windows arbitrary partition table delete issue. Advisory ID: XSec-06-05 Advisory Name: VMware 5.5.1 for Windows arbitrary partition table delete issue. Release Date: 08/16/2006 Tested on: VMware 5.5.1 build-19175 on Windows Serve...

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete

http://www.xsec.org Overview: On running windows system, you can't delete, format and change system dirver. \ VMware register a COM Object use for Virtual Disk, but it's very danger. \ I don't know how to name this issue. If you allow unsafe ActiveX and jscript, \ and has VMware installed, the...

VMware 5.5.1 - Partition Table Deletion Denial of Service

VMware 5.5.1 - Partition Table Deletion Denial of Service source: https://www.securityfocus.com/bid/19551/info VMware is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to destroy partition tables on the affected computer and to deny service to legitimate...