kernel: non-root can trigger cpu_idle soft lockup

Integer overflow in the hrtimerstart function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service panic via a large relative timeout value. NOTE: some of these details are obtained from third party information...

Security Best Practice: Protect Yourself from VoIP Denial of Service Vulnerabilities

VoIP opens voice communications to the same kinds of security threats that imperil data communications. Attacks on data communications can come through the IP voice infrastructure and vice versa. Denial of service attacks targeting weak VoIP elements could flood the network with voice traffic,...

Cross site scripting

Cross-site scripting XSS vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter to 1 the default URI or 2 index.php, or 3 the PATHINFO to index.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-3566

Cross-site scripting XSS vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter to 1 the default URI or 2 index.php, or 3 the PATHINFO to index.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-3566

Cross-site scripting XSS vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter to 1 the default URI or 2 index.php, or 3 the PATHINFO to index.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-3566

CVE-2008-3566 describes a cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7. The issue allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter to (1) the default URI, (2) index.php, or (3) the PATH_INFO to index.php. The available documents con...

CVE-2008-3566: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter to 1 the default URI or 2 index.php, or 3 the PATHINFO to index.php. NOTE: the provenance of this information is unknown; the details are...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Debian Security Advisory DSA 1608-1 (mysql-dfsg-5.0)

The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1608-1. OpenVAS Vulnerability Test $Id: deb16081.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1608-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

Sun Java System ASP Server Detection

The remote service is an ASP Server, part of Sun Java System Active Server Pages or an older variant such as Chili!Soft ASP, which provides a web server with ASP Active Server Pages functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Debian Security Advisory DSA 1565-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1565-1. OpenVAS Vulnerability Test $Id: deb15651.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1565-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1554-1 (roundup)

The remote host is missing an update to roundup announced via advisory DSA 1554-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Attack Trojans-remote control software of its own vulnerability to your attention?-vulnerability warning-the black bar safety net

from:sowhat blog Two days before the RSA conference, there was a guy named Joel Eriksson researchers show how to attack the Trojans, particularly the Trojan control terminalto control the“hacker”. blog.wired.com/27bstroke6/2008/04/researcher-demo.html Eriksson found one in the Celestial Empire on...

Debian Security Advisory DSA 1531-1 (policyd-weight)

The remote host is missing an update to policyd-weight announced via advisory DSA 1531-1. OpenVAS Vulnerability Test $Id: deb15311.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1531-1 policyd-weight Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

Format string

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

Directory traversal

Directory traversal vulnerability in the Net Inspector HTTP Server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot slash in the URI...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1401

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

CVE-2008-1402

CVE-2008-1402 affects MG-SOFT Net Inspector, specifically versions up to 6.5.0.828 on Windows. The vulnerability allows remote denial of service: (1) via a UDP packet to the SNMP Trap Service (MgWTrap3.exe) and (2) via a malformed request to the Net Inspector Server (niengine). The provided conne...