1480 matches found
Microsoft Windows SRV2.SYS SMB Negotiate ProcessID Function Table Dereference
No description provided by source. $Id: ms09050smb2negotiatefuncindex.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
openSUSE Security Update : sysconfig (openSUSE-SU-2012:0242-1)
This update for sysconfig contains the following fixes : - sysconfig hook script for NetworkManager did not properly quote shell meta characters when processing ESSIDs. Specially crafted network names could therefore lead to execution of shell code CVE-2011-4182. - Explicitly disabled posix mode ...
DEBIAN-CVE-2012-6647
The futexwaitrequeuepi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted...
UBUNTU-CVE-2012-6647
The futexwaitrequeuepi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted...
PT-2014-2415 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.5.1 Description: The issue is related to the futex wait requeue pi function in the Linux kernel, which does not properly validate futex addresses. This can be exploited by local users to cause a denial of...
Oracle Linux 5 : kernel (ELSA-2013-1034-1)
From Red Hat Security Advisory 2013:1034 : Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20130710)
This update fixes the following security issues : - Information leaks in the Linux kernel could allow a local, unprivileged user to leak kernel memory to user-space. CVE-2012-6544, CVE-2012-6545, CVE-2013-3222, CVE-2013-3224, CVE-2013-3231, CVE-2013-3235, Low - An information leak was found in th...
Low: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
RHEL 5 : kernel (RHSA-2013:1034)
Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
CVE-2013-0075: Undefined Security Weakness
The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service reboot via a crafted packet that terminates a TCP connection, aka "TCP FIN...
PT-2012-1853 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.13 Description: The issue allows remote authenticated users to cause a denial of service, resulting in an infinite request loop. This is achieved by specifying a zero wait time for message refreshing in the...
CentOS 5 : kernel (CESA-2012:1061)
Updated kernel packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix two security issues and multiple bugs are now available for Red Hat Enterprise Linux 5.6 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...
SuSE 11.1 Security Update : Linux kernel (SAT Patch Number 5732)
The SUSE Linux Enterprise 11 SP1 kernel was updated to 2.6.32.54, fixing lots of bugs and security issues. The following security issues have been fixed : - A potential hypervisor escape by issuing SGIO commands to partitiondevices was fixed by restricting access to these commands. CVE-2011-4127 ...
VSS Freeze Wait Timeout
Challenge A Backup or Replication tasks fails with the following errors: "VSSControl: Failed to prepare guest for freeze, wait timeout 900 sec." "VSSControl: Failed to freeze guest, wait timeout" Solution Possible Security Software Interference Anti-virus software may impede VSS operations. As an...
Wake-on-LAN
This script will send a WoL Wake-On-LAN packet to each MAC address listed in file uploaded via its preference. To use this feature : - The scanner must be located on the same physical subnet as the targets. - The MAC addresses of the targets must be listed in a text file supplied via the policy...
PT-2010-5008
Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 2.1.x through 2.1.9 Description The issue arises from the wait for child to die function in main/event.c, which does not properly handle long queue times for requests under certain circumstances, such as long-term database...
CVE-2010-2836: Undefined Security Weakness
Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service memory consumption by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID...
Fedora 12 : mod_auth_shadow-2.2-8.fc12 (2010-6359)
Fixes CVE-2010-1151 modauthshadow: bad wait2 call causes randomized authorization behaviour 578168. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
[SECURITY] Fedora 11 Update: ntp-4.2.4p7-3.fc11
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...