4398 matches found
LBL Traceroute 1.4 a5 - Heap Corruption (3)
LBL Traceroute 1.4 a5 - Heap Corruption 3 // source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw...
LBL Traceroute 1.4 a5 - Heap Corruption (2)
LBL Traceroute 1.4 a5 - Heap Corruption 2 // source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw...
Sun JDK 1.1.x / Sun JRE 1.1.x - Listening Socket
source: https://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the java.net.ServerSocket class to create a listening...
XFree86: libICE DoS
Hi, I've been sitting on this one for a while. SUMMARY ======= Due to inadequate bounds checking in libICE, a denial of service exists with any application using inet listening libICE for network services. Unfortunately, there is a fairly prominent user of libICE, namely gnome-session. The...
Gnome 1.0/1.1 / Group X 11.0 / XFree86 X11R6 3.3.x/4.0 - Denial of Service
// source: https://www.securityfocus.com/bid/1369/info A denial of service vulnerability exists in libICE, part of the X11 windowing system. Any libICE application which creates inet listening sockets can be remotely crashed. This is due to a bug in the handling of the SKIPSTRING macro. By...
CVE-2000-0227
The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmemmax parameter, which allows local users to cause a denial of service by requesting a large number of sockets...
CVE-2000-0227
The CVE-2000-0227 entry concerns the Linux 2.2.x kernel where the number of Unix domain sockets is not restricted by the wmem_max parameter. This allows a local attacker to cause a denial of service by requesting a large number of sockets. The linked sources confirm the affected platform and vuln...
DoS-атака через доменные сокеты UNIX в Linux
: Большой объем информации посланный с помощью sendto через сокет в /dev/log приводит к краху системы...
CVE-2000-0227
The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmemmax parameter, which allows local users to cause a denial of service by requesting a large number of sockets...
Linux Kernel 2.2.122.2.142.3.99 (RedHat 6.x) - Socket Denial of Service
Linux Kernel 2.2.122.2.142.3.99 RedHat 6.x - Socket Denial of Service / source: https://www.securityfocus.com/bid/1072/info A denial of service exists in Linux kernels, as related to Unix domain sockets ignoring limits as set in /proc/sys/net/core/wmemmax. By creating successive Unix domain...
Linux Kernel 2.2.12/2.2.14/2.3.99 (RedHat 6.x) - Socket Denial of Service
/ source: https://www.securityfocus.com/bid/1072/info A denial of service exists in Linux kernels, as related to Unix domain sockets ignoring limits as set in /proc/sys/net/core/wmemmax. By creating successive Unix domain sockets, it is possible to cause a denial of service in some versions of th...
PT-1999-1482 · Ibm · Ibm Websphere
Name of the Vulnerable Software and Affected Versions: IBM WebSphere affected versions not specified Description: The issue concerns the use of weak encryption by the IBM WebSphere ikeyman tool to store a password for a key database used in SSL connections. Recommendations: At the moment, there i...
SSH.1.2.27.DOS.txt
SSH 1.2.27 DOS: o SSH has the option of setting up "authentication sockets", used to pass authentication keys securely. When this is used, a socket is created on both client and server machines; the socket created on the server uses an often easy to guess filename based on the PID... The creation...
ssh_exploit.txt
I recieved this email today and wanted to know if it is something to be of concern about. The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com SSH 1.2.27 vulnerable to a Denial of Service attack...
X11.tmp.txt
Date: Mon, 2 Nov 1998 23:04:43 +0100 From: Pavel Kankovsky To: [email protected] Subject: X11 cookie hijacker drwxrwxrwx 2 root root 1024 Oct 30 19:57 /tmp/.X11-unix Hang on, aren't those dangerous permissions? Pretty dangerous. Shall I look for my old cookie hijacker? Please post the bloody...
PT-1999-1328 · Netscape · Netscape Enterprise Server
Name of the Vulnerable Software and Affected Versions: Netscape Enterprise Server affected versions not specified Description: The issue is related to a denial of service in Netscape Enterprise Server. This occurs due to a buffer overflow in the SSL handshake. Recommendations: At the moment, ther...
PT-2009-6738
Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise affected versions not specified Linux kernel versions prior to 2.6.19 Description The issue allows local users to gain privileges or cause a denial of service via vectors involving the MSG MORE flag and a UDP socket. This...
