1290 matches found
CVE-2005-0384
Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via a pppd client...
CVE-2005-0384: Undefined Security Weakness
Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via a pppd client...
USN-95-1: Linux kernel vulnerabilities
A remote Denial of Service vulnerability was discovered in the Netfilter IP packet handler. This allowed a remote attacker to crash the machine by sending specially crafted IP packet fragments. CAN-2005-0209 The Netfilter code also contained a memory leak. Certain locally generated packet fragmen...
CVE-2005-0384
Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via a pppd client...
CVE-2005-0384
Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via a pppd client...
ppp: No denial of service vulnerability
Background ppp is a Unix implementation of the Point-to-Point Protocol. Description The pppd server improperly verifies header fields, potentially leading to a crash of the pppd process handling the connection. However, since a separate pppd process handles each ppp connection, this would not...
USN-12-1: ppp Denial of Service
It has been discovered that ppp does not properly verify certain data structures used in the CBCP protocol. This vulnerability could allow an attacker to cause the pppd server to crash due to an invalid memory access, leading to a denial of service. However, there is no possibility of code...
CAN-2004-0814: Linux terminal layer races
Linux 2.6.9 fixes a set of race conditions in the Linux terminal subsystem which are believed to go back to 2.2 kernels if not earlier. The race shows up problematically in two places. Firstly a user can cause crashes and other undefined behaviour by issuing a TIOCSETLD ioctl on a terminal...
CVE-2004-0165
The Mac OS X PPP daemon (pppd) 2.4.0 on Mac OS X ≤10.3.2 is affected by a format-string vulnerability in option_error() that can cause vslprintf() to leak data from the pppd process, potentially exposing PAP/CHAP credentials. This may enable reading arbitrary pppd data when the service is used as...
CVE-2002-0398
CVE-2002-0398 affects Red-M 1050AP (Bluetooth Access Point) PPP server. The vulnerability allows bonded users to cause a denial of service and, per description, possibly execute arbitrary code via a long user name. This is tied to the PPP authentication path and the device’s management interface....
CVE-2002-0398: Undefined Security Weakness
Red-M 1050 Bluetooth Access Point PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a long user name...
Apple Mac OS X Point-to-Point Protocol daemon (pppd) contains format string vulnerability
Overview Apple Mac OS X Point-to-Point Protocol daemon contains a format string vulnerability in the handling of invalid command line arguments. Description The Point-to-Point Protocol PPP provides a method for transmitting datagrams over serial point-to-point links. There is a format string...
CVE-2003-0357: Undefined Security Weakness
Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 Mount and 2 PPP dissectors...
Ethereal contains integer overflow in PPP dissector
Overview Ethereal is a network traffic analysis package. The PPP packet dissector contains a vulnerability that may result in the execution of arbitrary code. Description The PPP packet dissector for Ethereal contains an integer overflow vulnerability. According to the Ethereal Advisory,...
CVE-2002-0851
The CVE-2002-0851 issue affects the ISDN4Linux (i4l) package, specifically the PPP daemon ipppd. A format string vulnerability in the device name command line argument is not properly sanitized in a syslog call, allowing a local user to exploit the flaw and gain root privileges. The connected doc...
CVE-2002-1356: Undefined Security Weakness
Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed packets to the 1 LMP, 2 PPP, or 3 TDS dissectors, possibly related to a missing field for EndVerifyAck messages...
CVE-2002-0854
Buffer overflows in ISDN Point to Point Protocol PPP daemon ipppd in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges...
CVE-2002-0854
The CVE-2002-0854 entry documents a buffer overflow in the ISDN Point to Point Protocol daemon (ipppd) of the i4l package, affecting SuSE 7.3 and 8.0 (and possibly other OSes). The underlying issue is a buffer overflow in ipppd, which could allow local users to gain privileges. The connected reco...
CVE-2002-0827: Undefined Security Weakness
Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via 1 ppptalk or 2 ppp, a different vulnerability than CVE-2002-0824...