941 matches found
SGI IRIX <= 6.4 permissions Buffer overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/417/info A buffer overrun exists in the permissions program, as shipped by Silicon Graphics with the 5.x and 6.x Irix operating system. By supplying a long, well crafted buffer as the 4th argument to the program, arbitrar...
SGI IRIX <= 6.2 fsdump Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/355/info A number of vulnerabilities exist in the fsdump program included with Silicon Graphics Inc's IRIX operating system. Each of these holes can be used to obtain root privlilege. Variant 1: irix% /var/rfindd/fsdump...
SGI IRIX <= 6.3 -xrm Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/334/info A vulnerability exists in the X libraries as supplied with Silicon Graphics IRIX operating system. By placing a carefully constructed buffer as the argument to the -xrm option, an attacker can execute arbitrary...
SGI IRIX <= 6.4 startmidi Vulnerabilty
No description provided by source. source: http://www.securityfocus.com/bid/469/info A vulnerability exists in the startmidi program from Silicon Graphics. This utility is included with Irix versions 5.x and 6.x with the Iris Digital Media Execution Environment. startmidi is setuid root, and...
SGI IRIX 5.3/6.2 ordist Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/415/info A buffer overflow exists in the ordist program, as shipped with Irix 6.x and 5.x from Silicon Graphics. By supplying long arguments to the '-d' option, containing a properly crafted buffer of machine exectuable...
SGI IRIX 6.2 - day5notifier Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/345/info A vulnerability exists in the day5notifier program, shipped with Irix 6.2 from Silicon Graphics Inc. This program will allow any user to run any command as root. day5notifier wisely replaces a number of system...
SGI IRIX <= 6.3 df Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/346/info A buffer overflow exists in IRIX 5.x and 6.x 'df' utility, from Silicon Graphics Inc. By supplying a long argument to the -f option of df, a user can crash the df program. By carefully crafting a buffer containin...
The Year in NSA
It’s that most wonderful time of the year, the time when everyone with access to an email machine puts together a list of the best or worst of whatever happened in the last 12 months. In the computer security world, there is no doubt that such a list would find NSA stories in places one through...
Memory corruption
Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...
Cisco IOS XR Internet Control Message Protocol Denial of Service Vulnerability
Cisco IOS XR Software is affected by a denial of service DoS vulnerability that could allow an authenticated, local attacker to trigger a reload of the affected device by locally generating certain Internet Control Message Protocol ICMP messages. The vulnerability is due to a combination of Silic...
Seeking Crowd Engagement, Startup Stumbles On New Tool For Crowd Control
When CrowdOptic, a Silicon Valley, venture funded startup, developed a cool application that could stream real-time, context-aware information streams to mobile devices, the applications seemed straight-forward and lucrative enough: a blend of advertising and broadcasting that sports franchises a...
Ankit Fadia (Ethical Hacker and Cyber Security Expert) is also Not Secure !
Ankit Fadia Ethical Hacker and Cyber Security Expert is also Not Secure ! Ankit Fadia, 21 years old, is an independent computer security and digital intelligence consultant with definitive experience in the field of Internet security based out of the Silicon Valley in California, USA. He has...
Silicon Graphics Inc (SGI) - IRIX - Local Kernel Memory Disclosure/Denial of Service
===============================ADVISORY=============================== Advisory: Silicon Graphics Inc SGI - IRIX - Local Kernel Memory Disclosure/Denial of Service Advisory ID: DSEC-2010-0001 Author: Neil Kettle, Digit Security Ltd Affected Software: Silicon Graphics SGI IRIX Vendor URL:...
Unfixed XSS vulnerability at www.silicon-power.com
Security researcher Sony, has submitted on 26/12/2010 a cross-site-scripting XSS vulnerability affecting www.silicon-power.com, which at the time of submission ranked 159502 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...
enet(Silicon Valley power)misallocation caused by leakage of the file and fixes-vulnerability warning-the black bar safety net
Brief Description: The jsp server is improperly configured, the result%3f the leak file Detail: Relates to the directory, as an example Vulnerabilityto prove: Repair solutions:?. jsp to%3f. jsp URL encoding occurs, resulting in the processing of jsp requests to the file Assembly errors of judgmen...
Research: Frame-Busting Does Not Stop Clickjacking
New research from Stanford University and Carnegie Mellon University’s Silicon Valley campus found that frame-busting, a popular technique that basically stops a website from operating when it’s loaded inside a “frame,” does not prevent clickjacking. Read the full article. Dark Reading...
Fingerprint recognition technology to crack-vulnerability warning-the black bar safety net
Some time ago enrolled in driver training, the results found a crack for fingerprint recognition. Now what all speak of high-tech driver training is certainly no exception, in training on the use of fingerprint attendance machine to record the students on the car of time, reach the predetermined...
CVE-2009-0741
SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...
Sql injection
SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...
