SUSE SLED12 Security Update : netatalk (SUSE-SU-2018:4217-1)

This update for netatalk fixes the following issues : Security issue fixed : CVE-2018-1160 Fixed a missing bounds check in the handling of the DSI OPEN SESSION request, which allowed an unauthenticated to overwrite memory with data of their choice leading to arbitrary code execution with root...

Slackware 14.0 / 14.1 / 14.2 / current : netatalk (SSA:2018-355-01)

New netatalk packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-355-01. The text itself is copyright C Slackware...

Netatalk < 3.1.12 - Authentication Bypass Exploit

Exploit Title: Netatalk Authentication Bypass Exploit Author: Jacob Baines Vendor Homepage: http://netatalk.sourceforge.net/ Software Link: https://sourceforge.net/projects/netatalk/files/ Version: Before 3.1.12 Tested on: Seagate NAS OS x8664 CVE : CVE-2018-1160 Advisory:...

SUSE-SU-2018:4217-1 Security update for netatalk

This update for netatalk fixes the following issues: Security issue fixed: - CVE-2018-1160 Fixed a missing bounds check in the handling of the DSI OPEN SESSION request, which allowed an unauthenticated to overwrite memory with data of their choice leading to arbitrary code execution with root...

SUSE-SU-2018:4214-1 Security update for netatalk

This update for netatalk fixes the following issues: Security issue fixed: - CVE-2018-1160 Fixed a missing bounds check in the handling of the DSI OPEN SESSION request, which allowed an unauthenticated to overwrite memory with data of their choice leading for arbitrary code execution with root...

Netatalk 3.1.12 - Authentication Bypass

Exploit Title: Netatalk Authentication Bypass Date: 12/20/2018 Exploit Author: Jacob Baines Vendor Homepage: http://netatalk.sourceforge.net/ Software Link: https://sourceforge.net/projects/netatalk/files/ Version: Before 3.1.12 Tested on: Seagate NAS OS x8664 CVE : CVE-2018-1160 Advisory:...

CVE-2018-1160

creationtimestamp| type| source ---|---|--- 2018-12-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46048 2018-12-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46034 2019-04-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46675 2019-12-19...

Debian DSA-4356-1 : netatalk - security update

Jacob Baines discovered a flaw in the handling of the DSI Opensession command in Netatalk, an implementation of the AppleTalk Protocol Suite, allowing an unauthenticated user to execute arbitrary code with root privileges. C Tenable Network Security, Inc. The descriptive text and package checks i...

Netatalk Authentication Bypass

Exploit Title: Netatalk Authentication Bypass Date: 12/20/2018 Exploit Author: Jacob Baines Vendor Homepage: http://netatalk.sourceforge.net/ Software Link: https://sourceforge.net/projects/netatalk/files/ Version: Before 3.1.12 Tested on: Seagate NAS OS x8664 CVE : CVE-2018-1160 Advisory:...

Netatalk 3.1.12 - Authentication Bypass

Netatalk 3.1.12 - Authentication Bypass Exploit Title: Netatalk Authentication Bypass Date: 12/20/2018 Exploit Author: Jacob Baines Vendor Homepage: http://netatalk.sourceforge.net/ Software Link: https://sourceforge.net/projects/netatalk/files/ Version: Before 3.1.12 Tested on: Seagate NAS OS...

DEBIAN-CVE-2018-1160

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsiopensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution...

CVE-2018-1160

Netatalk before 3.1.12 is vulnerable to an out-of-bounds write in dsi_opensess.c due to missing bounds checking on attacker-controlled data. A remote unauthenticated attacker could achieve arbitrary code execution (potentially with root privileges). Public exploit activity exists (authentication ...

[SECURITY] [DSA 4356-1] netatalk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4356-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 20, 2018 https://www.debian.org/security/faq -...

Netatalk OpenSession Remote Code Execution

The Apple Filing Protocol AFP server running on the remote host is affected by a remote code execution vulnerability due to a buffer overflow condition when handling an OpenSession request. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to execute...

D-Link DAP-1160 Unauthenticated Remote Configuration Remote Reboot - Ver2

A vulnerability exists in D-Link DAP-1160. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Security Bulletin: Financial Transaction Manager for ACH Services, Check Services and Corporate Payment Services potential Cross Site Scripting vulnerabilities (CVE-2017-1160)

Summary Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services there are potential Cross Site Scripting vulnerabilities. These have been addressed with CVE-2017-1160. Vulnerability Details CVEID: CVE-2017-1160 DESCRIPTION: IBM Financial Transaction Manag...

CVE-2017-1160

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

Moodle 2.0.x < 2.0.8 / 2.1.x < 2.1.5 / 2.2.x < 2.2.2 Multiple Vulnerabilities

Binary data 9401.prm...

CVE-2016-1160

CVE-2016-1160 concerns the WordPress plugin WP Favorite Posts (versions before 1.6.6). The vulnerability is a Cross-Site Scripting (XSS) issue that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected software is the WP Favorite Posts plugin for WordPress; the...

Oracle: Security Advisory (ELSA-2011-1350)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...