Bull/IBM AIX Clusterwatch/Watchware - Multiple Vulnerabilities

Bull Clusterwatch/Watchware is a VERY VERY OLD tool used by sysadmins to manage their AIX clusters. Marble effect in the web banner and questionable font: it smells the 90s ! Tool is mainly a web app with CGIs shell scripts and binaries and we have found three vulnerabilities in it: Trivial admin...

How to Generate a Crashdump from an Unresponsive XenServer 7

This article describes how to generate a crashdump from an unresponsive XenServer 7. If XenServer crashes, the running kernel can migrate into a special memory area which is based on kexec functions that loads a special kernel without the need for a server cold restart. This new kernel attempts t...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server component exists due to insufficient validation of input data by the MySQL database management system. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the system to become unresponsive or, in rare cases, to crash using network...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server component: The Optimizer component of the MySQL database management system is vulnerable due to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2017:0086 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 This update rollup is superseded by July 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 KB3172614 that was released on July 21, 2016. The June 2016 update rollup for Windows RT 8.1,...

ntp: infinite loop in sntp processing crafted packet

It was discovered that the sntp utility could become unresponsive due to being caught in an infinite loop when processing a crafted NTP packet...

Provisioning Server 7.9 -- PVS Target Devices drop off network after login

Having logged into a PVS Target Device we see the Target Device disconnect from PVS Console. The Target Device then becomes unresponsive to pings and the machine hangs and sits in an unresponsive state...

VMWare Tools Auto-Update Renders PVS Target Devices Unresponsive

The PVS target device turn unresponsive a few seconds after booting up correctly. The behavior is only observed after devices are rebooted. The device will be marked as down on the PVS console and there will be no retries registered as the device will not reconnect to PVS...

How to change the XenServer Pool master role from XenServer Console

In certain situation like Master server becoming unresponsive, we may need to changethe XenServer Pool master role. This article illustrates how to perform that from XenServer Console...

Debian Security Advisory DSA 3611-1 (libcommons-fileupload-java - security update)

The TERASOLUNA Framework Development Team discovered a denial of service vulnerability in Apache Commons FileUpload, a package to make it easy to add robust, high-performance, file upload capability to servlets and web applications. A remote attacker can take advantage of this flaw by sending fil...

PVS Machines Becoming Unresponsive After a Period of Time with Excessive vDisk Retries

PVS machines become unregistered. They are in a unresponsive state and do not respond to ICA, RDP, or Console connections. Discovered that the PVS target devices were exhibiting massive retries in the Vdisk usage pane:...

HTTP.sys Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP 2.0 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become...

Samba LDAP Server libldb Infinite Loop Denial of Service (CVE-2015-3223)

A denial-of-service vulnerability has been reported in the Samba LDAP server. The vulnerability is due to a error in processing certain LDAP requests by the libldb library used by the Samba daemon. A remote, authenticated attacker could exploit this vulnerability by sending malicious packets to...

The vulnerability of Solaris Cluster software allows a hacker to trigger a service failure.

The vulnerability of the Resource Group Manager sub-component of the Solaris Cluster software is related to errors in the code. Exploiting this vulnerability can allow an attacker to cause the operating system to become unresponsive, or in rare cases, to cause a crash...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component of the MySQL database management system’s options involves code errors. Exploiting this vulnerability can allow a malicious actor to cause the operating system to become unresponsive, or in rare cases, to cause an emergency shutdown through network...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...

Cisco Unified SIP Phone 3905 Series Phones Remote Denial of Service Vulnerability

The Cisco Unified SIP Phone 3905 is a SIP phone device. A security vulnerability exists in the Cisco Unified SIP Phone 3905 that allows a remote user to submit a specially crafted mass communication to the target device to cause the device to stop responding...

File System on Control Domain Full on XenServer

There are a variety of errors and symptoms that can be seen when the Control Domain file system becomes full. The errors and symptoms that you see might be different depending on the partition layout of your XenServer host. Possible errors can include the following errors or alerts might appear...

Cisco Prime Renegotiation Request Denial of Service Vulnerability

A vulnerability in Cisco Prime could allow a remote, unauthenticated attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of SSL renegotiation requests. An unauthenticated, remote attacker could exploit this vulnerability by sending multiple SSL...