CVE-2006-3858: Undefined Security Weakness

IBM Informix Dynamic Server IDS before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory product defects 171893, 171894, 173772...

[SECURITY] [DSA 1128-1] New heartbeat packages fix local denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1128-1 [email protected] http://www.debian.org/security/ Martin Schulze July 28th, 2006 http://www.debian.org/security/faq -...

USN-326-1: heartbeat vulnerability

Yan Rong Ge discovered that heartbeat did not set proper permissions for an allocated shared memory segment. A local attacker could exploit this to render the heartbeat service unavailable Denial of Service...

[Full-disclosure] Heartbeat Shared Memory - Local Denial of Service Exploit

Hello! Follow in attachment an exploit to Heartbeat Insecure Shared Memory Vulnerability: https://vulners.com/cve/CVE-2006-3815 It?s very simple to exploit this fail. Best Regards, Nash Leon. Intruders Tiger Team Security http://www.intruders.org.br/ Novidade no Yahoo! Mail: receba alertas de nov...

Linux-HA Heartbeat 1.2.3/2.0.x - Insecure Default Permissions on Shared Memory

// source: https://www.securityfocus.com/bid/19186/info Since Linux-HA Heartbeat has insecure default permissions set on shared memory, local attackers may be able to cause a denial of service. Exploitation would most likely result in a system crash, loss of data, and resource exhaustion, leading...

Linux-HA Heartbeat 1.2.32.0.x - Insecure Default Permissions on Shared Memory

Linux-HA Heartbeat 1.2.32.0.x - Insecure Default Permissions on Shared Memory // source: https://www.securityfocus.com/bid/19186/info Since Linux-HA Heartbeat has insecure default permissions set on shared memory, local attackers may be able to cause a denial of service. Exploitation would most...

CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

DEBIAN-CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

CVE-2006-3815

CVE-2006-3815 affects the heartbeat component used by the High-Availability Linux stack. The vulnerability arises from insecure permissions set on an allocated shared memory segment (shmget) in heartbeat.c prior to version 2.0.6, enabling a local attacker to cause a denial of service. OpenVAS, De...

CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

Intel Wireless Service (s24evmon.exe) Shared Memory Exploit

No description provided by source. /////////////////////////////////////////////////////////////////////// //// S24EvMon.exe Intel Wireless Management Service KEY Hunter //// Rubén Santamarta //// [email protected] //// www.reversemode.com //// 28/04/2006...

Intel Wireless Service - s24evmon.exe Shared Memory

Intel Wireless Service - s24evmon.exe Shared Memory /////////////////////////////////////////////////////////////////////// //// S24EvMon.exe Intel Wireless Management Service KEY Hunter //// Rubén Santamarta //// [email protected] //// www.reversemode.com //// 28/04/2006...

Intel Wireless Service - 's24evmon.exe' Shared Memory

/////////////////////////////////////////////////////////////////////// //// S24EvMon.exe Intel Wireless Management Service KEY Hunter //// Rubén Santamarta //// [email protected] //// www.reversemode.com //// 28/04/2006 /////////////////////////////////////////////////////////////////////// ...

Intel wireless service s24evmon.exe information leak

S24EventManagerSharedMemory shared memory sections is used to store critical information, such as WEP keys and passwords without access control...

Intel wireless service s24evmon.exe confidential information disclosure.

S24EvMon.exe is a service which is part at least of the Intel PROset/Wireless software. This application is provided by Intel in order to support intel Wireless Devices based on Spectrum 24 chipsets. This service uses a shared memory section which is created without the proper security descriptor...

Code injection

Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bug...

CVE-2006-2071

Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bug...

CVE-2006-2071

CVE-2006-2071 affects Linux kernels 2.4.x and 2.6.x up to 2.6.16. It arises from a flaw in the mprotect handling that allowed a local user to grant write permission to a read-only attachment of a shared memory segment, bypassing IPC permissions and enabling modification of the attachment. Reporte...