CVE-2006-7179

CVE-2006-7179 affects the MadWifi driver: ieee80211_input.c before 0.9.3 fails to properly process Channel Switch Announcement Information Elements, allowing remote attackers to cause a denial of service (loss of communication) by triggering a channel switch with Channel Switch Count ≤ 1. Public ...

CVE-2006-7179

ieee80211input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements CSA IEs, which allows remote attackers to cause a denial of service loss of communication via a Channel Switch Count less than or equal to one, triggering a channel change...

Mercury Mail 4.0.1 (LOGIN) Remote IMAP Stack Buffer Overflow Expl

Exploit for unknown platform in category remote exploits ==================================================================== Mercury Mail 4.0.1 LOGIN Remote IMAP Stack Buffer Overflow Exploit ==================================================================== !/usr/bin/perl...

Netrek 2.12.0 pmessage2() Remote Limited Format String Exploit

Exploit for unknown platform in category dos / poc ============================================================== Netrek 2.12.0 pmessage2 Remote Limited Format String Exploit ============================================================== Luigi Auriemma Application: Netrek http://www.netrek.org...

Netrek 2.12.0 - 'pmessage2()' Remote Limited Format String

Luigi Auriemma Application: Netrek http://www.netrek.org Versions: \0\0\0"; strcatfromstr, me-pmapc...

Cisco Catalyst Hybrid Mode Malformed MPLS Packet Remote DoS (CSCsd37415, CSCef90002)

The remote host is a CISCO Catalyst 6500 switch containing a version of IOS that is affected by a denial of service vulnerability when processing malformed MPLS packets. An attacker may exploit this flaw to crash the remote device. C Tenable Network Security, Inc. include"compat.inc"; ifdescripti...

Cisco IOS TCP Listener Crafted Packets Remote DoS (CSCek37177)

The remote CISCO switch runs a version of IOS contains a flaw which may cause the remote router to crash when processing specially malformed TCP packets. An attacker might use these flaws to crash this router remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

Race condition

The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...

CVE-2007-1057

The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...

CVE-2007-1057

The CVE-2007-1057 issue affects the Net Direct client for Linux before 6.0.5 in Nortel products (Application Switch 2424, VPN 3050/3070, SSL VPN Module 1000). The vulnerability arises from extracting and executing files with insecure permissions, enabling a local attacker to exploit a race condit...

CVE-2007-1057

The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...

NukeSentinel 2.5.05 - 'nukesentinel.php' File Disclosure

!/usr/bin/php File Disclosure Maybe work on other versions. Interesting exploit = if$argc URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -file Options Example: $argv0 -url http://www.victim.com/ -file config.php Options:...

Re: [Full-disclosure] S21sec-034-en: Cisco VTP DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello - Cisco has posted a Security Response in reference to this issue at the following URL: http://www.cisco.com/warp/public/707/cisco-sr-20070129-vtp.shtml Cisco Response ============== An issue has been reported to the Cisco PSIRT involving...

CA BrightStor ARCserve (msgeng.exe) Remote Heap Overflow Exploit 2

No description provided by source. !/usr/bin/perl original exploit by lssec.com this is a perl porting acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 3 print "--------------------------------------------------------------------\n"; print "Usage : BrightStoreARCServer-11-5-4targets....

S21sec-034-en: Cisco VTP DoS vulnerability

ID: S21SEC-034-en Title: Cisco VTP Denial Of Service Date: 26/01/2007 Status: Vendor contacted, bug fixed Severity: Medium - DoS - remote from the local subnet Scope: Cisco Catalyst Switch denial of service Platforms: IOS Author: Alfredo Andres Omella, David Barroso Berrueta Location:...

CVE-2006-5755

Linux kernel before 2.6.18, when running on x8664 systems, does not properly save or restore EFLAGS during a context switch, which allows local users to cause a denial of service crash by causing SYSENTER to set an NT flag, which can trigger a crash on the IRET of the next task...

CVE-2006-5755

CVE-2006-5755 affects the Linux kernel on x86_64 where, during a context switch, EFLAGS were not properly saved/restored. This can allow a local user to trigger a denial-of-service crash by causing SYSENTER to set an NT flag, which may crash on the IRET of the next task. The vulnerability is docu...

CVE-2006-6488

Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control DlgWrapper.dll before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long 1 FileName or 2 Filter argument...

[SA23583] ICONICS Dialog Wrapper Module ActiveX Control Buffer Overflow

TITLE: ICONICS Dialog Wrapper Module ActiveX Control Buffer Overflow SECUNIA ADVISORY ID: SA23583 VERIFY ADVISORY: http://secunia.com/advisories/23583/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: ICONICS Gauge ActiveX 8.x http://secunia.com/product/13098/ ICONICS...

CVE-2006-6488

Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control DlgWrapper.dll before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long 1 FileName or 2 Filter argument...