317 matches found
[Yersinia v0.7.3] The network protocols assessment tool
Yersinia is a network tool designed to take advantage of some weakeness in different network protocols. It pretends to be a solid framework for analyzing and testing the deployed networks and systems. Currently, there are some network protocols implemented, but others are coming tell us which one...
CVE-2012-4757
Multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .sta or .stp file. NOTE: the...
Authentication flaw
The cat6000-dot1x component in Cisco IOS 12.2 before 12.233SXI7 does not properly handle 1 a loop between a dot1x enabled port and an open-authentication dot1x enabled port and 2 a loop between a dot1x enabled port and a non-dot1x port, which allows remote attackers to cause a denial of service...
CVE-2011-2057
The CVE-2011-2057 issue affects Cisco IOS 12.2-era cat6000-dot1x: when handling dot1x ports, a loop between a dot1x-enabled port and an open-authentication or non-dot1x port can trigger a flood of STP BPDU frames, causing a denial of service (traffic storm). Affected product is Cisco IOS 12.2 bef...
SystemTap Version Detection
This script detects the installed version of SystemTap and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodsystemtapdetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ SystemTap Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.com This program...
Debian DSA-358-4 : linux-kernel-2.4.18 - several vulnerabilities
A number of vulnerabilities have been discovered in the Linux kernel. - CAN-2003-0461: /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords. Thi...
CVE-2003-0550
The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology...
CVE-2003-0551
The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages that address several security vulnerabilites are now available for the IA64 architecture. Updated 28 August 2003 Changed the CVE name listed in description from the incorrect CAN-2002-0247 to CAN-2003-0247 The Linux kernel handles the basic functions of the operating syste...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages that address various security vulnerabilities are now available for Red Hat Enterprise Linux. The Linux kernel handles the basic functions of the operating system. Security issues have been found that affect the versions of the Linux kernel shipped with Red Hat Enterprise...
DSA-358 linux-kernel-2.4.18 - several vulnerabilities
Bulletin has no description...
CVE-2003-0551
The CVE-2003-0551 entry concerns the STP protocol in Linux 2.4.x. According to the sources, STP input processing did not properly verify certain lengths, which could allow attackers to cause a denial of service. Public documents reference Red Hat RHSA-2003:239 and Debian DSA advisories (DSA-423-1...
CVE-2003-0550
CVE-2003-0550 concerns the STP support in Linux kernel 2.4.x. The vulnerability stems from the STP protocol implementation failing to provide adequate security, enabling attackers to modify the bridge topology. Public documents in the connected set confirm this issue across multiple advisories (e...
CVE-2003-0550
The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology...
CVE-2003-0551
The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service...
Cisco Catalyst 5000 Series Frame STP Port Broadcast DoS (CSCdt62732)
When an 802.1x IEEE standard for port based network access control frame is received by an affected Catalyst 5000 series switch on a STP Spanning Tree Protocol blocked port it is forwarded in that VLAN Virtual Local Area Network instead of being dropped. This causes a performance impacting 802.1x...