Information disclosure

The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service host crash by replacing the instruction that causes the VM to exit in one thread with a different instruction in a different thread...

CVE-2011-1780

The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service host crash by replacing the instruction that causes the VM to exit in one thread with a different instruction in a different thread...

CVE-2011-1780

The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service host crash by replacing the instruction that causes the VM to exit in one thread with a different instruction in a different thread...

CVE-2013-2816

The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service reboot or link outage via crafted input over a serial line...

Design/Logic Flaw

The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service reboot or link outage via a crafted DNP3 TCP packet...

Design/Logic Flaw

The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service reboot or link outage via crafted input over a serial line...

CVE-2013-2813

The CVE-2013-2813 issue affects Cooper Power Systems SMP Gateway family (SMP 16 Gateway, SMP 4 Gateway, and SMP 4/DP Gateway). The DNP3 component improperly validates input, allowing remote attackers to trigger a reboot or communication link outage via a specially crafted DNP3 TCP packet. The vul...

CVE-2013-2816

The CVE-2013-2816 entry concerns Cooper Power Systems SMP Gateway DNP3 components (SMP 16 Gateway, SMP 4 Gateway, SMP 4/DP Gateway). The vulnerability stems from improper input validation in the DNP3 component, enabling reboot or link outage. Two attack surfaces are noted: IP-connected (remote) v...

CVE-2013-2813

The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service reboot or link outage via a crafted DNP3 TCP packet...

Cooper Power Systems SMP Gateway串行本地拒绝服务漏洞

Bugtraq ID:64283 CVE ID:CVE-2013-2816 Cooper Power Systems SMP Gateway是一个数据集中器，部署在能源领域中。 Cooper Power Systems SMP Gateway DNP3组件不正确处理输入，允许通过串行连接的远程攻击者利用漏洞提交特制的报文，使通信链接断开或使设备重启。 0 Cooper Power Systems SMP 16 Gateway Data Concentrator Cooper Power Systems SMP 4 Gateway Data Concentrator Cooper Powe...

Cooper Power Systems SMP Gateway TCP报文处理拒绝服务漏洞

Bugtraq ID:64279 CVE ID:CVE-2013-2813 Cooper Power Systems SMP Gateway是一个数据集中器，部署在能源领域中。 Cooper Power Systems SMP Gateway DNP3组件不正确处理输入，允许远程攻击者利用漏洞提交特制的TCP报文，使通信链接断开或使设备重启。 0 Cooper Power Systems SMP 16 Gateway Data Concentrator Cooper Power Systems SMP 4/DP Gateway Data Concentrator 厂商补丁： Cooper...

Scientific Linux Security Update : glibc on SL5.x i386/x86_64 (20131008)

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions pvalloc, valloc, and memalign. If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of t...

Oracle Linux 5 : glibc (ELSA-2013-1411)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1411 advisory. 2.5-118.2 - Fix integer overflows in valloc and memalign. 1011804. 2.5-118.1 - Add support for newer L3 caches on x86-64 and correctly count the number of...

RHEL 5 : glibc (RHSA-2013:1411)

Updated glibc packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation

OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in Cooper Power Systems Cybectec DNP3 Master OPC Server software. Cooper Power Systems has discontinued the OPC server and recommends that customers use the SMP...

Cooper Power Systems Improper Input Validation Vulnerability

OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in the Cooper Power Systems SMP Gateway DNP3 protocol components. Cooper Power Systems has produced a new firmware version that mitigates this vulnerability. Coope...

CVE-2013-3458

Cisco Adaptive Security Appliances ASA devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to cause a denial of service device crash via a large volume of 1 SSL or 2 TLS traffic, aka Bug ID CSCuh19462...

CVE-2013-3458

CVE-2013-3458 affects Cisco ASA SMP platforms where SSL/TLS certificate handling can crash the device under heavy SSL/TLS traffic. A remote attacker can trigger a denial of service by generating a large volume of traffic directed at the ASA. The issue is tied to the SSL/TLS certificate processing...

[Arachni v0.4.3] Ruby framework aimed towards helping penetration testers

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. Arachni is smart, it trains itself by learning from the HTTP responses it receives during the audit process. Unlike other...