629 matches found
Linux Kernel < 2.6.36-rc1 (Ubuntu 10.04 / 2.6.32) - 'CAN BCM' Local Privilege Escalation
/ i-CAN-haz-MODHARDEN.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2959 Ben Hawkes discovered an integer overflow in the Controller Area Network CAN subsystem when setting up frame content and filtering certain messages. An attacker...
CVE-2009-0687
The PF pf_test_rule function in OpenBSD PF (affecting OpenBSD 4.2–4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, MidnightBSD 0.3-current) is vulnerable to a NULL pointer dereference triggered by crafted IPv4 packets with an ICMPv6 payload, causing remote denial of service (panic) during transl...
CVE-2009-0687: Undefined Security Weakness
The pftestrule function in OpenBSD Packet Filter PF, as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service panic via crafted IP packets that trigger a NULL pointer dereference during...
OpenBSD pf DoS
Null pointer dereferenceon malformed IPv4 packet with ICMPv6 data...
Packet Filter Null Pointer Dereference
/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-30 Found : 2009-04-09 Affected Software: PF OpenBSD Packet Filter Affected OS ...
Multiple Vendor PF Null Pointer Dereference Vulnerability
No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-30 Found : 2009-04-09 Affected Software: PF...
OpenBSD 4.5 Denial Of Service
/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affected OS : OpenBSD 4.3,4,5,...
OpenBSD 4.3 up to OpenBSD-current: PF null pointer dereference - remote DoS (kernel panic)
/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affected OS : OpenBSD 4.3,4,5,...
OpenBSD 4.5 - IP datagrams Remote Denial of Service
/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affected OS : OpenBSD 4.3,4,5,...
FreeBSD Security Advisory (FreeBSD-SA-06:07.pf.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:07.pf.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Intel CORE 2处理器多个本地拒绝服务漏洞
Intel CORE 2是非常流行的双核处理器。 CORE 2处理器中存在多个拒绝服务漏洞： 如果温度达到了无效的温度，则即使已经超过了设置的阀值，CPU仍不会生成Thermal中断； 在执行一系列REP存储指令期间，存储可能会在完成指令之前便试图分派内存，导致处理器锁定和/或系统挂起； 如果一个逻辑处理器写入非脏页面（dirty page），另一个逻辑处理器写入相同的非脏页面或在相关的页面表项中明确的设置脏位，则内部处理器行为的复杂交互会导致不可预测的系统行为并挂起； 如果从Core 1请求数据导致L1缓存丢失，就会将请求发送给L2缓存。如果这个请求遇到了Core...
real-dos.txt
!/usr/bin/python Real player 10 Gold .Ra file remote Dos. Credits to n00b for finding this bug This bug is a nasty memory leak with in Real player 10 gold please remember if your guna test it out save all your info you need first..Coz your probly guna have to reboot also remember all other...
CVE-2007-0596: Undefined Security Weakness
PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...
OpenBSD PF IP分片拒绝服务漏洞
BUGTRAQ ID: 16375 CVECAN ID: CVE-2006-0381 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD内核的报文分片处理模块存在漏洞，远程攻击者可利用此漏洞对服务器进行拒绝服务攻击。 远程攻击者可能通过精心构造的恶意分片报文导致内核崩溃。 FreeBSD FreeBSD 6.0-STABLE FreeBSD FreeBSD 6.0-RELEASE FreeBSD FreeBSD 5.4 FreeBSD FreeBSD 5.3 OpenBSD OpenBSD current OpenBSD OpenBSD 3.8 OpenBSD OpenB...
ypserv -- Inoperative access controls in ypserv
Problem Description There are two documented methods of restricting access to NIS maps through ypserv8: through the use of the /var/yp/securenets file, and through the /etc/hosts.allow file. While both mechanisms are implemented in the server, a change in the build process caused the "securenets"...
CVE-2006-0381
The CVE-2006-0381 entry describes a logic bug in pf's IP fragment cache that can cause a fragment to be inserted twice when using the pf rules scrub fragment crop or scrub fragment drop-ovl. Affected products include FreeBSD 5.3, 5.4, and 6.0, and OpenBSD. The impact is remote denial of service (...
CVE-2006-0381
A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service crash via crafted packets that cause a packet fragment to be...
FreeBSD-SA-06:07.pf
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:07.pf Security Advisory The FreeBSD Project Topic: IP fragment handling panic in pf4 Category: contrib Module: syscontrib Announced: 2006-01-25 Credits: Jakob...
[SA18609] FreeBSD "pf" IP Fragment Denial of Service Vulnerability
TITLE: FreeBSD "pf" IP Fragment Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18609 VERIFY ADVISORY: http://secunia.com/advisories/18609/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: FreeBSD 6.x http://secunia.com/product/6778/ FreeBSD 5.x...
CVE-2006-0381: Undefined Security Weakness
A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service crash via crafted packets that cause a packet fragment to be...