MEDHOST Connex Hardcoded Password

CVE-2017-11743 Overview ------------ MEDHOST Connex contains a hard-coded Mirth Connect admin password in all versions. This is a new vulnerability not related to CVE-2016-4328, CVE-2017-11614, CVE-2017-11693 or CVE-2017-11694. Description ------------ MEDHOST Connex contains a hard-coded Mirth...

Internet Bug Bounty: CVE-2017-11367: Global buffer overflow (READ of size 4) in shoco C library

The shocodecompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service buffer over-read and application crash via malformed compressed data. The vendor has been unresponsive since this was reported in February of 2017. ==19039==ERROR:...

Windows 10 + Citrix Profile Management : Start Menu Unable to Retain Pinned Items and Becomes Unresponsive

After installing Win10 and Citrix Profile Management 5.x you may notice that the Start menu cannot retain pinned items after restart and sometimes it may not even launch...

How to forcibly shutdown VMs from command line

To shutdown VMs that are not responding to a shutdown command from XenCenter or the xe CLI...

Bull/IBM AIX Clusterwatch/Watchware - Multiple Vulnerabilities

Bull Clusterwatch/Watchware is a VERY VERY OLD tool used by sysadmins to manage their AIX clusters. Marble effect in the web banner and questionable font: it smells the 90s ! Tool is mainly a web app with CGIs shell scripts and binaries and we have found three vulnerabilities in it: Trivial admin...

How to Generate a Crashdump from an Unresponsive XenServer 7

This article describes how to generate a crashdump from an unresponsive XenServer 7. If XenServer crashes, the running kernel can migrate into a special memory area which is based on kexec functions that loads a special kernel without the need for a server cold restart. This new kernel attempts t...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server component: The Optimizer component of the MySQL database management system is vulnerable due to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server component exists due to insufficient validation of input data by the MySQL database management system. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the system to become unresponsive or, in rare cases, to crash using network...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2017:0086 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 This update rollup is superseded by July 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 KB3172614 that was released on July 21, 2016. The June 2016 update rollup for Windows RT 8.1,...

ntp: infinite loop in sntp processing crafted packet

It was discovered that the sntp utility could become unresponsive due to being caught in an infinite loop when processing a crafted NTP packet...

Provisioning Server 7.9 -- PVS Target Devices drop off network after login

Having logged into a PVS Target Device we see the Target Device disconnect from PVS Console. The Target Device then becomes unresponsive to pings and the machine hangs and sits in an unresponsive state...

VMWare Tools Auto-Update Renders PVS Target Devices Unresponsive

The PVS target device turn unresponsive a few seconds after booting up correctly. The behavior is only observed after devices are rebooted. The device will be marked as down on the PVS console and there will be no retries registered as the device will not reconnect to PVS...

How to change the XenServer Pool master role from XenServer Console

In certain situation like Master server becoming unresponsive, we may need to changethe XenServer Pool master role. This article illustrates how to perform that from XenServer Console...

Debian Security Advisory DSA 3611-1 (libcommons-fileupload-java - security update)

The TERASOLUNA Framework Development Team discovered a denial of service vulnerability in Apache Commons FileUpload, a package to make it easy to add robust, high-performance, file upload capability to servlets and web applications. A remote attacker can take advantage of this flaw by sending fil...

PVS Machines Becoming Unresponsive After a Period of Time with Excessive vDisk Retries

PVS machines become unregistered. They are in a unresponsive state and do not respond to ICA, RDP, or Console connections. Discovered that the PVS target devices were exhibiting massive retries in the Vdisk usage pane:...

HTTP.sys Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP 2.0 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become...

Samba LDAP Server libldb Infinite Loop Denial of Service (CVE-2015-3223)

A denial-of-service vulnerability has been reported in the Samba LDAP server. The vulnerability is due to a error in processing certain LDAP requests by the libldb library used by the Samba daemon. A remote, authenticated attacker could exploit this vulnerability by sending malicious packets to...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component of the MySQL database management system’s options involves code errors. Exploiting this vulnerability can allow a malicious actor to cause the operating system to become unresponsive, or in rare cases, to cause an emergency shutdown through network...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...