CVE-2014-9087

Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a crafted OID in a 1 S/MIME message or 2 ECC based OpenPGP data, which triggers a buffer overflow...

gnupg: denial of service

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow. The bug is not easy to exploit because there only 80 possible values which can be used to overwrite memory. However, a denial of service is possible and someone may come up with other...

libksba buffer overflow

Buffer overflow on S/MIME messages parsing...

[ MDVSA-2014:234 ] libksba

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:234 http://www.mandriva.com/en/support/security/ Package : libksba Date : November 28, 2014 Affected: Business Server 1.0 Problem Description: Updated libksba packages fix security vulnerability: By using...

libksba: denial of service

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow. The bug is not easy to exploit because there only 80 possible values which can be used to overwrite memory. However, a denial of service is possible and someone may come up with other...

Ubuntu 14.04 LTS : Libksba vulnerability (USN-2427-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2427-1 advisory. Hanno Bck discovered that Libksba incorrectly handled certain S/MIME messages or ECC based OpenPGP data. An attacker could use this issue to cause Libksba to cras...

USN-2427-1: Libksba vulnerability

Hanno Böck discovered that Libksba incorrectly handled certain S/MIME messages or ECC based OpenPGP data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code...

[SECURITY] [DSA 3078-1] libksba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3078-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 27, 2014 http://www.debian.org/security/faq -...

DSA-3078-1 libksba - security update

Bulletin has no description...

MGASA-2014-0498 Updated libksba packages fix security vulnerability

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could lead to a denial of service CVE-2014-9087...

Updated libksba packages fix security vulnerability

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could lead to a denial of service CVE-2014-9087...

CVE-2014-9087

Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a crafted OID in a 1 S/MIME message or 2 ECC based OpenPGP data, which triggers a buffer overflow...

UBUNTU-CVE-2014-9087

Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a crafted OID in a 1 S/MIME message or 2 ECC based OpenPGP data, which triggers a buffer overflow...

. NET remote code execution MS14-0 2 6/CVE-2 0 1 4-1 8 0 6-a vulnerability warning-the black bar safety net

今天 看 到 小 猪 在 safekey 的 群 里面 说 关注 了 很 久 了 一 个 .NET a remote code execution vulnerability exp discloses, then immediately go to exploit-db to find the next find the it. This is Microsoft in 1 4 years 5 months has released a patch for a vulnerability that is MS14-0 2 6/CVE-2 0 1 4-1 8 0 6, bug the...

通达T9 oa系统sql注射12处打包(demo站点root权限)

简要描述： T9智能管理平台是基于B/S架构，灵活、稳定、安全、高性能的办公系统。采用自主研发的引擎技术，提供强大的工作流和公文流程管理功能，可完全根据客户需求定制办公门户平台。 详细说明： 测试地址 http://t9.go2oa.com/t9/core/frame/webos/index.jsp 测试帐号及密码 oa/无 注入1： 漏洞分析： url： http://t9.go2oa.com/t9/t9/core/funcs/message/weixunshare/act/T9WeiXunShareAct/getWeiXunById.act postdata: wxid=110'...

RHEL 6 : qemu-kvm-rhev (RHSA-2014:0744)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0744 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...

CVE-2014-4623: Undefined Security Weakness

EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store ADS GEN4S and Avamar Virtual Edition AVE, when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force atta...

CVE-2014-7462

The Fashion Story: Neon 90's aka com.teamlava.fashionstory39 application 1.5.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7462

CVE-2014-7462 affects the Android app “The Fashion Story: Neon 90’s” (package com.teamlava.fashionstory39), version 1.5.6.5. The root cause is failure to verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

CVE-2014-7462

The Fashion Story: Neon 90's aka com.teamlava.fashionstory39 application 1.5.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...