Code injection

Cisco Firewall Services Module FWSM 3.x before 3.13.1 allows remote attackers to cause a denial of service device reboot via malformed SNMP requests...

CVE-2007-0962

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.04.14 and 7.1 before 7.12.1, and the FWSM 2.x before 2.34.12 and 3.x before 3.13.24, when "inspect http" is enabled, allows remote attackers to cause a denial of service device reboot via malformed HTTP traffic...

CVE-2007-0964: Undefined Security Weakness

Cisco FWSM 3.x before 3.13.18, when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service device reboot via a malformed HTTPS request...

CVE-2007-0966: Undefined Security Weakness

Cisco Firewall Services Module FWSM 3.x before 3.13.11, when the HTTPS server is enabled, allows remote attackers to cause a denial of service device reboot via certain HTTPS traffic...

CVE-2007-0967: Undefined Security Weakness

Cisco Firewall Services Module FWSM 3.x before 3.13.1 allows remote attackers to cause a denial of service device reboot via malformed SNMP requests...

CVE-2007-0963: Undefined Security Weakness

Unspecified vulnerability in Cisco Firewall Services Module FWSM 3.x before 3.13.3, when set to log at the "debug" level, allows remote attackers to cause a denial of service device reboot by sending packets that are not of a particular protocol such as TCP or UDP, which triggers the reboot durin...

CVE-2007-0959

Cisco PIX 500 Series Security Appliances and Cisco ASA 5500 Series ASA contain a vulnerability (CVE-2007-0959) that can cause a DoS via malformed TCP packets when the device is configured to inspect certain TCP-based protocols. The root cause is insufficient handling of malformed TCP streams, all...

CVE-2007-0961

Cisco PIX 500, ASA 5500 Series, and FWSM (3.x) are affected when SIP inspection is enabled. A vulnerability in SIP message handling allows remote, unauthenticated attackers to trigger a DoS by sending malformed SIP packets, potentially causing device reloads/reboots. Affected versions include ASA...

SGI propack information leak

Content of last session's frame buffer is shown after reboot...

Design/Logic Flaw

SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information...

CVE-2005-4826

CVE-2005-4826 concerns Cisco IOS 12.1(22)EA3 on Catalyst 2950T where the VLAN Trunking Protocol (VTP) can be abused by a crafted Subset-Advert packet to cause a device reboot (DoS). Related entries (CVE-2006-4774/75/76) describe VTP-related crashes and near-arbitrary-code risk via VTP summary adv...

CVE-2005-4826: Undefined Security Weakness

Unspecified vulnerability in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.122EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service device reboot via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-47...

Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow

This module exploits a stack buffer overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot. Module Options msf use exploit/netware/smb/lsass/cifs msf undefinedcifs show actions ...actions... msf undefinedcifs set...

Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell NetWare...

ms ;)

Hello vuln, char bug = "??C:"; forint i = 0; i 10; i ++ ::MessageBox0, bug, bug, MBSERVICENOTIFICATION; На 2-4 итерации - синий экран или ребут from forum kuban.ru; NULL -- Best regards, wins mailto:[email protected]...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:151)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to and including 2.6.16-rc2, when running on x8664 systems with preemption enabled, local users can cause a DoS oops via multiple ptrace tasks that perform single steps CVE-2006-1066. Prior to 2.6.16, a...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:124)

A race condition in the Linux kernel 2.6.17.4 and earlier allows local users to obtain root privileges due to a race condition in the /proc filesystem. The provided packages are patched to fix these vulnerabilities. All users are encouraged to upgrade to these updated kernels immediately and rebo...

Microsoft Plug and Play Service Registry Overflow

This module triggers a stack buffer overflow in the Windows Plug and Play service. This vulnerability can be exploited on Windows 2000 without a valid user account. Since the PnP service runs inside the service.exe process, this module will result in a forced reboot on Windows 2000. Obtaining cod...

Important kernel security update

2.6.9-42.0.3.0.2 -rebuilt for EL 2.6.9-42.0.3.0.1 -Fix bonding primary=ethX so it picks correct network IT 101532 ORA 5136660 2.6.9-42.0.3 -fix mprotect to not allow permission subversion Jason Baron 190073 CVE-2006-2071 -fix sysperfmonctl file descriptor reference count issue Anil Keshavamurthy...

CVE-2006-5966

Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...