Multiple Cisco routers IOS DoS vulnerabilities
Published:		27.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4411
Type:		remote
Level:		7/10
Description:		Malcrafted IPv6, BGP or MPLS packets can cause router to reboot.

Affected:		CISCO : IOS 12.0
		CISCO : IOS 12.1
		CISCO : IOS 12.2
		CISCO : IOS 12.3

Original document		CERT, US-CERT Technical Cyber Security Alert TA05-026A -- Multiple Denial-of-Service Vulnerabilities in Cisco IOS (27.01.2005)
		CISCO, Cisco Security Advisory: Cisco IOS Misformed BGP Packet Causes Reload (27.01.2005)
		CISCO, Cisco Security Advisory: Crafted Packet Causes Reload on Cisco Routers (27.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

OpenSWAN IPSec implementation XAUTH authentication buffer overflow
Published:		27.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4412
Type:		remote
Level:		6/10
Description:		pluto process stack based buffer overflow.

Affected:		OPENSWAN : Openswan 2.2
		OPENSWAN : Openswan 1.0

Original document

IDEFENSE, iDEFENSE Security Advisory 01.26.05: Openswan XAUTH/PAM Buffer Overflow Vulnerability (27.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple ISC bind named DoS vulnerabilities
Published:		27.01.2005
Source:		SECUNIA
SecurityVulns ID:		4413
Type:		remote
Level:		7/10
Description:		authvalidated() internal state DoS conditions, q_usedns array overflow.

Affected:		BIND : bind 8.4
		BIND : bind 9.3

Original document		SECUNIA, [SA14008] BIND Validator Denial of Service Vulnerability (27.01.2005)
		SECUNIA, [SA14009] BIND "q_usedns" Array Buffer Overflow Vulnerability (27.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

MacOS X at scheduling utilities privelege escalation
Published:		27.01.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4414
Type:		local
Level:		5/10
Description:		During execution of user's batch job system groups membership is not dropped.

Affected:

APPLE : MacOS X 10.3

Original document

Kevin Finisterre, [Full-Disclosure] DMA[2005-0127a] - 'Apple OSX batch family poor use of setuid' (27.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

Juniper router JUNOS DoS
Published:		27.01.2005
Source:		SECUNIA
SecurityVulns ID:		4416
Type:		remote
Level:		6/10
Description:		Invalid packet causes router to crash.

Affected:		JUNIPER : JunOS 5.2
		JUNIPER : JunOS 5.3
		JUNIPER : JunOS 6.3
		JUNIPER : JUNOS 6.4
		JUNIPER : JunOS 7.0

Original document

SECUNIA, [SA14049] Juniper JUNOS Unspecified Packet Processing Denial of Service (27.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

Sun Solaris UDP endpoints DoS
Published:		27.01.2005
Source:		SECUNIA
SecurityVulns ID:		4417
Type:		local
Level:		5/10
Description:		Heavy UDP usage with large number of open sockets can cause system to panic.

Affected:		SUN : Solaris 8
		SUN : Solaris 9

Original document

SECUNIA, [SA14037] Sun Solaris UDP End Point Handling Denial of Service (27.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

Ingate Firewall disabled user PPTP disconnection problem
Published:		27.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4418
Type:		local
Level:		4/10
Description:		Then user is disabled active PPTP sessions are not disconnected.

Affected:

INGATE : Ingate Firewall 4.1

Original document

INGATE, Ingate Firewall: Removed PPTP tunnels not deactivated (27.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

Real Player real audio files buffer overflow
Published:		27.01.2005
Source:		VULN-DEV
SecurityVulns ID:		4410
Type:		client
Level:		5/10
Description:		Buffer overflow on .ra files parsing.

Affected:

REAL : RealPlayer 10.5

Original document

Carlos Ulver, RealPlayer 10.5 Denial of Service and possible Overflow (27.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

WinAmp media player buffer overflow updated since 24.11.2004
Published:		27.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4210
Type:		client
Level:		6/10
Description:		IN_CDDA.dll stack overflow

Affected:		NULLSOFT : WinAMP 5.05
		NULLSOFT : WinAMP 5.07
		NULLSOFT : WinAMP 5.06
		NULLSOFT : WinAMP 5.08

Original document		Nsfocus Security Team, NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name (27.01.2005)
		Brett Moore, Winamp - Buffer Overflow In IN_CDDA.dll (24.11.2004)

Files:		Winamp Exploit (POC) 5.05 Stack Overflow
		WinAmp in_cdda.dll buffer overflow exploit
		Winamp Exploit (POC) 5.08 Stack Overflow
Discuss:		Read or add your comments to this news (0 comments)

Sun Solaris DHCP utilities and DHCP client privilege escalation updated since 27.01.2005
Published:		26.08.2005
Source:		SECUNIA
SecurityVulns ID:		4415
Type:		local
Level:		6/10

Affected:

SUN : Solaris 8

Original document		SECUNIA, [SA16521] Sun Solaris DHCP Client Arbitrary Code Execution Vulnerability (26.08.2005)
		SECUNIA, [SA13992] Sun Solaris DHCP Administration Utilities Vulnerability (27.01.2005)

Discuss:

Read or add your comments to this news (0 comments)