888 matches found
Rutkowska's Qubes OS to Implement Disposable VMs
Joanna Rutkowska’s Qubes OS project will include a feature to create one-time use-and-discard virtual machines. The idea behind Disposable VMs is to have very lightweight virtual machines that can be created and booted quickly with a sole purpose of hosting only one application. “Then, once you’r...
U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) root compromise / VU#433821
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Executive Summary - ----------------- Unprivileged local users can obtain root access on Unix systems where the DISA SRR scripts are run. If a remote user can introduce a file into the filesystem e.g. anonymous ftp, http upload, cdrom, samba share,...
Xpdf Integer Overflow
Name: Xpdf - Integer overflow which causes heap overflow and NULL pointer derefernce Author: Adam Zabrocki / HISPASEC or Date: July 06, 2009 Issue: Xpdf allows local and remote attackers to overflow buffer on heap via integer overflow vulnerability. Xpdf is prone to NULL pointer dereference attac...
Xpdf 3.01 - Local Heap Overflow Null Pointer Dereference
Xpdf 3.01 - Local Heap Overflow Null Pointer Dereference Name: Xpdf - Integer overflow which causes heap overflow and NULL pointer derefernce Author: Adam Zabrocki / HISPASEC or Date: July 06, 2009 Issue: Xpdf allows local and remote attackers to overflow buffer on heap via integer overflow...
The invasion of Spy satellite system technologies-vulnerability warning-the black bar safety net
VAX: VAX stands for Virtual Address Extension. The VAX computer is due to hardware limitations, is designed to store the address, so that it can be a simple operation to some great adapted to store the program. The VAX computer system is the DESDigital Equipment CorporationCompany design...
Fedora 8 : kvm-60-6.fc8 (2008-4604)
Tue May 27 2008 Glauber Costa - 60-6.fc8 - Fix Cirrus heap overflow vulnerability 448524 - Fri May 23 2008 Daniel P. Berrange - 60-5.fc8 - Put PTY in rawmode - Fri May 16 2008 Glauber Costa - 60-4.fc8 - Fix problem with cirrus device that was breaking vnc connections rhbz 446830 - Wed Feb 27 2008...
SuSE 10 Security Update : xen (ZYPP Patch Number 4766)
This update fixes various Xen issues. Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints. - Xen 3.1.1 does not prevent modification of the CR4 TSC from...
TIBCO Rendezvous 7.4.11 - add router Remote Buffer Overflow
TIBCO Rendezvous 7.4.11 - add router Remote Buffer Overflow / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win32 public version Affected products: Tibco RendezOVous version =7.4.11 Multiple Vulnerabilities Author: Andres Tarasco Acuña atarasco @ sia.es Advisory: http://www.514.es...
CVE-1999-1057
CVE-1999-1057 affects VMS 4.0 through 5.3. The vulnerability arises from the ANALYZE/PROCESS_DUMP DCL command, enabling local users to gain privileges. Root cause: improper access control on the ANALYZE/PROCESS_DUMP DCL command. Impact: local privilege escalation (partial confidentiality/integrit...
CVE-1999-1324
The issue affects OpenVMS running on VAXstations (OpenVMS 5.3–5.5-2) with VMS DECwindows or MOTIF, where access to accounts that exceeded the failed-login break-in limit is not properly disabled. This permits brute-force password guessing and is described in PT-1999-1646 as allowing attackers to ...
CVE-1999-1325
Summary (CVE-1999-1325): SAS System 5.18 running on VAX/VMS is installed with insecure permissions on its directories and startup file, enabling local users to gain privileges. The entry is rated CVSS v2 base score 7.2 (HIGH) with local attack vector and no authentication required; impact is conf...
CVE-1999-1057
VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESSDUMP dcl command...
CVE-1999-1325
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges...
CVE-1999-1324
VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing...
CVE-1999-1324: Improper Restriction of Excessive Authentication Attempts
VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing...
CVE-1999-1325: Undefined Security Weakness
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges...
CVE-1999-1057: Undefined Security Weakness
VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESSDUMP dcl command...
CVE-1999-1395
CVE-1999-1395 describes a local privilege escalation in the Monitor utility (SYS$SHARE:SPISHR.EXE) affecting VMS 5.0 through 5.4-2. The vulnerability allows local users to gain privileges. The connected documents confirm the affected product and code component but do not provide specific technica...
CVE-1999-1315
CVE-1999-1315 affects DECnet/OSI on OpenVMS prior to 5.8 running on DEC Alpha AXP and VAX/VMS. The vulnerability allows local users to gain privileges or cause a denial of service. The connected documents confirm the affected environment but do not provide detailed root cause, specific vulnerable...