CVE-2013-1772

The logprefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service buffer overflow and system crash by leveraging /dev/kmsg write access and triggering a...

UBUNTU-CVE-2013-1772

The logprefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service buffer overflow and system crash by leveraging /dev/kmsg write access and triggering a...

Enterasys NetSight nssyslogd.exe Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Enterasys NetSight nssyslogd.exe Buff...

Enterasys NetSight nssyslogd.exe Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Enterasys NetSight nssyslogd.exe Buffer Overflow

This module exploits a stack buffer overflow in Enterasys NetSight. The vulnerability exists in the Syslog service nssylogd.exe when parsing a specially crafted PRIO from a syslog message. The module has been tested successfully on Enterasys NetSight 4.0.1.34 over Windows XP SP3 and Windows 2003...

CVE-2010-2387

vicious-extensions/ve-misc.c in GNOME Display Manager gdm 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs...

Design/Logic Flaw

vicious-extensions/ve-misc.c in GNOME Display Manager gdm 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs...

CVE-2010-2387

vicious-extensions/ve-misc.c in GNOME Display Manager gdm 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs...

Leave information on scanned hosts

This routine stores information about the scan on the scanned host, provided it is a unixoid system offering ssh access with a standard shell. The information cover hostname, scan start time and scan end time. No details about the actual scan results are stored on the scanned host. By default, th...

CVE-2011-5227

Stack-based buffer overflow in the Syslog service nssyslogd.exe in Enterasys Network Management Suite NMS before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514...

Stack overflow

Stack-based buffer overflow in the Syslog service nssyslogd.exe in Enterasys Network Management Suite NMS before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514...

CVE-2011-5227

Enterasys NetSight (NMS) Syslog service nssyslogd.exe has a stack-based buffer overflow vulnerability exploitable via a crafted PRIO field in UDP traffic to port 514, affecting versions before 4.1.0.80 and allowing remote code execution. Public references and PoC/exploit modules (e.g., Metasploit...

CVE-2011-5227

Stack-based buffer overflow in the Syslog service nssyslogd.exe in Enterasys Network Management Suite NMS before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514...

LogAnalyzer Detection

The remote web server hosts Adiscon LogAnalyzer, a monitoring application used to view Syslog messages and Windows Events via a web interface written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62122; scriptversion"1.4";...

CVE-2012-4889

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

Mandrake Linux Security Advisory : cfengine (MDKSA-2000:061)

The GNU cfengine is an abstract programming language for system administrators of large heterogeneous networks, used for maintenance and administration. There are a number of string format vulnerabilities in syslog calls that can be abused to either make the cfengine program segfault and die or t...

Juniper Junos lo0 Firewall Bypass (PSN-2012-07-651)

According to its self-reported version number, the remote Junos router has a firewall bypass vulnerability. This issue is present when log or syslog actions are used along with discard within a firewall filter term deployed on the lo0 loopback interface. When the receive rate is very high, some...

CentOS 6 : rsyslog (CESA-2012:0796)

Updated rsyslog packages that fix one security issue, multiple bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

RedHat Update for rsyslog RHSA-2011:1247-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

php: zend_strndup() NULL pointer dereference may cause DoS

PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...