3257 matches found
Hardening Linux Security in few seconds using "Server Shield"
Are you running Linux just because you think it's safer than Windows? Think again. Sure, security is a built-in feature and extends right from the Linux kernel to the desktop, but it still leaves enough room to let someone muck about with your /home folder. Linux might be impervious to viruses an...
CVE-2011-4639
The 1 Traceroute and 2 Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && ampersand ampersand sequence...
CVE-2011-4639
The 1 Traceroute and 2 Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && ampersand ampersand sequence...
CVE-2011-4639
CVE-2011-4639 concerns SpamTitan WebTitan prior to version 3.60, where the (1) Traceroute and (2) Ping implementations in tools.php are vulnerable. The underlying issue allows remote authenticated users to execute arbitrary commands through shell metacharacters in an argument, demonstrated by an ...
PT-2012-1934
Name of the Vulnerable Software and Affected Versions SpamTitan WebTitan versions prior to 3.60 Description The issue concerns the Traceroute and Ping implementations in tools.php, allowing remote authenticated users to execute arbitrary commands via shell metacharacters in an argument. This can ...
CVE-2011-4639: Improper Control of Generation of Code
The 1 Traceroute and 2 Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && ampersand ampersand sequence...
CVE-2012-4361
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter...
CVE-2012-4361: Improper Neutralization of Special Elements used in an OS Command
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter...
CVE-2012-2986: Improper Neutralization of Special Elements used in an OS Command
lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 first, 2 third, or 3 fourth parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361...
PT-2012-5358
Name of the Vulnerable Software and Affected Versions HP Virtual SAN Appliance version prior to 9.5 Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter of the 'lhn/public/network/ping' endpoint. Recommendations For...
PT-2012-4416
Name of the Vulnerable Software and Affected Versions HP SAN/iQ version 9.5 on the HP Virtual SAN Appliance Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain parameters. This is due to an incomplete fix for a previous issue...
Scientific Linux Security Update : ypbind on SL3.x i386/x86_64
This updated package fixes the following bugs : - after a NIS server change, for example, after a server failure, ypbind corrupted files in the '/var/yp/binding/' directory. As well, these files were not updated, possibly causing old information to be retained. In these situations, glibc attempte...
kernel: rds-ping cause kernel panic
The rdsibxmit function in net/rds/ibsend.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service BUGON and kernel panic by establishing an RDS connection with the source IP address equal to the IPoIB...
HP StorageWorks P4000 Virtual SAN Appliance Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "HP StorageWorks...
ip-forwarding NSE Script
Detects whether the remote device has ip forwarding or "Internet connection sharing" enabled, by sending an ICMP echo request to a given target using the scanned host as default gateway. The given target can be a routed or a LAN host and needs to be able to respond to ICMP requests ping in order...
IPUtils Denial Of Service
==== Description ==== An integer overflow was found in iputils/pingcommon.c mainloop function which could lead to excessive CPU usage when triggered could lead to DoS. This means that both ping and ping6 are vulnerable. ==== Proof-Of-Concept ==== Specify "big" interval -i option for ping/ping6...
TP-Link Cross Site Scripting
Exploit Title: Tp-Link Cross Site Scripting Date: 11.03.2012 Author: l20ot Web Browser : Mozilla Firefox Blog : http://www.twitter.com/l20ot ------------------------------------------------------ Vulnerability is on Ping tool. 1- Go to http://192.168.1.1/maintenance/toolstest.htm 2- make ping lik...
kernel: security and bugfix update. (important)
The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...
OP5 license.php Remote Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'OP5 license.php...