Denial Of Service Vulnerability in OpenSSL (Jun 2009) - Linux

OpenSSL is prone to a Denial of Service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

OpenSSL ChangeCipherSpec DTLS报文拒绝服务漏洞

BUGTRAQ ID: 35174 CVECAN ID: CVE-2009-1386 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 如果在ClientHello报文之前发送了DTLS ChangeCipherSpec报文，就可能在OpenSSL的ssl/s3pkt.c文件中触发空指针引用，导致拒绝服务的情况。 OpenSSL 0.9.8i 厂商补丁： OpenSSL Project --------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

OpenSSL < 0.9.8i DTLS ChangeCipherSpec Remote DoS Exploit

No description provided by source. / cve-2009-1386.c OpenSSL 0.9.8i DTLS ChangeCipherSpec Remote DoS Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386 OpenSSL would SegFault if the DTLS server receives a...

CVE-2009-1386

ssl/s3pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a DTLS ChangeCipherSpec packet that occurs before ClientHello...

CVE-2009-1386

CVE-2009-1386 affects OpenSSL’s DTLS implementation: ssl/s3_pkt.c in OpenSSL versions before 0.9.8i allows a remote attacker to cause a denial of service via a ChangeCipherSpec datagram sent before ClientHello, causing a NULL pointer dereference and daemon crash. Public details place the vulnerab...

OpenSSL 0.9.8i - DTLS ChangeCipherSpec Remote Denial of Service

OpenSSL 0.9.8i - DTLS ChangeCipherSpec Remote Denial of Service / cve-2009-1386.c OpenSSL http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386 OpenSSL would SegFault if the DTLS server receives a ChangeCipherSpec as the first record instead of...

OpenSSL < 0.9.8i - DTLS ChangeCipherSpec Remote Denial of Service

/ cve-2009-1386.c OpenSSL http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386 OpenSSL would SegFault if the DTLS server receives a ChangeCipherSpec as the first record instead of ClientHello. Usage: Pass the host and port of the target DTLS server: $...

Gentoo Security Advisory GLSA 200501-12 (tikiwiki)

The remote host is missing updates announced in advisory GLSA 200501-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: serendipity

The remote host is missing an update to the system as announced in the referenced advisory. VID 9c133aa0-12bd-11dd-bab7-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-1386

Multiple cross-site scripting XSS vulnerabilities in the installer in Serendipity S9Y 1.3 allow remote attackers to inject arbitrary web script or HTML via 1 unspecified path fields or 2 the database host field. NOTE: the timing window for exploitation of this issue might be limited...

CVE-2008-1386

CVE-2008-1386 affects Serendipity (S9Y) 1.3 and its installer, where multiple XSS vulnerabilities exist in the installer (via unspecified path fields and the database host field) and in the referrer plugin of the blog application. The underlying issue is improper escaping that allows injection of...

s9y-xss.txt

Two smaller issues in s9y, published here: http://int21.de/cve/CVE-2008-1385-s9y.html http://int21.de/cve/CVE-2008-1386-s9y.html Cross Site Scripting XSS in serendipity 1.3 referrer plugin, CVE-2008-1385 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1385 http://www.s9y.org/...

[Full-disclosure] Cross site scripting issues in s9y &#40;CVE-2008-1386, CVE-2008-1387&#41;

Two smaller issues in s9y, published here: http://int21.de/cve/CVE-2008-1386-s9y.html http://int21.de/cve/CVE-2008-1387-s9y.html Cross Site Scripting XSS in serendipity 1.3 referrer plugin, CVE-2008-1385 References https://vulners.com/cve/CVE-2008-1385 http://www.s9y.org/ Description In the...

Debian: Security Advisory (DSA-1386-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1386-2 (wesnoth)

The remote host is missing an update to wesnoth announced via advisory DSA 1386-2. OpenVAS Vulnerability Test $Id: deb13862.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1386-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 254-1 (traceroute-nanog)

The remote host is missing an update to traceroute-nanog announced via advisory DSA 254-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2003-1386

Affected product: Axis 2400 Video Server 2.00–2.33. The vulnerability allows remote attackers to obtain sensitive information by requesting /support/messages, which displays the server’s /var/log/messages log. This is a network-based information disclosure with low attack complexity and no authen...

Debian DSA-1386-1 : wesnoth - programming error

A problem has been discovered in the processing of chat messages. Overly long messages are truncated by the server to a fixed length, without paying attention to the multibyte characters. This leads to invalid UTF-8 on clients and causes an uncaught exception. Note that both wesnoth and the wesno...

CVE-2006-1386

The CVE-2006-1386 issue affects TWiki 4.0 and 4.0.1, where the rdiff and preview scripts fail to enforce access controls, enabling remote attackers to read restricted TWiki topics. The description specifies the vulnerable components and root cause (access-control bypass in rdiff/preview scripts),...

CVE-2005-1386

PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 ipban.php, 2 db.php, 3 lang-norwegian.php, 4 lang-indonesian.php, 5 lang-greek.php, 6 a request to WebLinks with the portuguese language lang-portuguese.php, 7 a request to WebLinks with the...