CVE-2016-2054: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via a long filename, involving handling a "config" command...

CVE-2016-2055: Exposure of Sensitive Information to an Unauthorized Actor

xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command...

PT-2016-1728

Name of the Vulnerable Software and Affected Versions xymond versions 4.1.x through 4.3.x before 4.3.25 Description The issue is related to a lack of protection for service data in the xymond component of the Debian GNU/Linux operating system. It allows a remote attacker to read arbitrary files i...

PT-2016-1729

Name of the Vulnerable Software and Affected Versions Xymon versions 4.1.x through 4.3.x before 4.3.25 Description The issue is caused by multiple buffer overflows in the xymond/xymond.c file, allowing remote attackers to execute arbitrary code or cause a denial of service daemon crash via a long...

DLA-335-1 ntp - security update

Bulletin has no description...

Network Time Protocol Daemon (ntpd) 3.x / 4.x < 4.2.8p4 Multiple Vulnerabilities

The version of the remote NTP server is 3.x or 4.x prior to 4.2.8p4. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the ntpcrypto.c file due to improper validation of the 'vallen' value in extension fields. An unauthenticated, remote attacker can exploit this, vi...

UBUNTU-CVE-2015-7703

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration...

PT-2015-7586

Name of the Vulnerable Software and Affected Versions NTP ntpd versions 4.2.x through 4.2.8p3 NTP ntpd versions 4.3.x through 4.3.76 Description The issue allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration...

Multiple Arbitrary File Overwrite Vulnerabilities in NTP

Network Time Protocol is a protocol used to synchronize a computer's time to its server or clock source e.g., quartz clock, GPS, etc.. The NTP :config command can set the pidfile and driftfile paths without restriction, allowing remote attackers to exploit this vulnerability to overwrite files on...

Flowplayer Cross Site Scripting

Flowplayer js & swf XSS Vulnerability Date: 15/5/14 Vulnerablity Risk : High Vulnerable Sofware: http://flowplayer.org/ Dork : inurl:flowplayer/flowplayer.swf Author: Muhammad Adeel aka Innoxent Stoker Founder | Urdusecurity.blogspot.com Vulnerability xss is Cross Site Scripting vuln Which actual...

Hobbit Monitor config Method Traversal Arbitrary File Access

The version of the Hobbit Monitor daemon installed on the remote host does not properly filter the argument to the 'config' command of directory traversal sequences. An unauthenticated attacker can leverage this flaw to retrieve arbitrary files from the affected host subject to the privileges of...