Cisco BGP DoS
Published:		17.06.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3761
Type:		remote
Level:		6/10
Description:		Router reboots on malformed BGP packet.

Affected:		CISCO : IOS 12.0
		CISCO : IOS 11.2
		CISCO : IOS 12.1
		CISCO : IOS 12.2
		CISCO : IOS 12.3

Original document

CISCO, [Full-Disclosure] Cisco Security Advisory: Cisco IOS Malformed BGP packet causes reload (17.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

FreeBSD securelevel protection bypass
Published:		17.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3762
Type:		local
Level:		5/10
Description:		It's possible to lower security level by installing new syscall.

Affected:

FREEBSD : FreeBSD 5.2

Original document

Radko Keves, Unprivilegued settings for FreeBSD kernel variables (17.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

Winagent buffer overflow
Published:		17.06.2004
Source:		SECURITEAM
SecurityVulns ID:		3763
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized filename.

Affected:

WINAGENTS : WinAgents TFTP Server 3.0

Original document

SECURITEAM, [NT] WinAgents TFTP Server Remote DoS (Long Filename) (17.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

Symantec Enterprise Firewall DNSD cache poisoning
Published:		17.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3764
Type:		remote
Level:		5/10
Description:		During DNS request parsing neither DNS server authority nor relation between request and response is checked.

Affected:		SYMANTEC : Enterprise Firewall 7.0
		Enterprise Firewall 8.0

Original document

fryxar, Symantec Enterprise Firewall DNSD cache poisoning Vulnerability (17.06.2004)

Files:		PoC DNS cache poisoning attack SEF 8 and later (by fryxar)
Discuss:		Read or add your comments to this news (0 comments)

Linux kernel i2c integer overflow DoS
Published:		17.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3765
Type:		remote
Level:		5/10
Description:		signed/unsigned conversion problem.

Affected:

LINUX : kernel 2.4

Original document

Shaun Moore, Linux Kernel i2c Integer Overflow Vulnerability (17.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

IBM eGatherer/IBM acpRunner ActiveX multiple bugs
Published:		17.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3766
Type:		client
Level:		5/10
Description:		Unsafe methods allows disk access and scripting.

Affected:		IBM : acpRunner 1.2
		IBM : eGatherer 2.0

Original document		EEYE, IBM acpRunner Activex Dangerous Methods Vulnerability (17.06.2004)
		EEYE, "IBM Access Support" (eGatherer) Activex Dangerous Methods Vulnerability (17.06.2004)

Discuss:

Read or add your comments to this news (0 comments)