krb5 security update

1.6.1-63.el57 - Fix for CVE-2011-4862...

CVE-2011-5052

creationtimestamp| type| source ---|---|--- 2011-12-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18283 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/streamdownbof.rb 2025-02-06 03:13:40+00:00| seen|...

Unfixed XSS vulnerability at forum.cifraclub.com.br

Security researcher NetFuzzer, has submitted on 27/12/2011 a cross-site-scripting XSS vulnerability affecting forum.cifraclub.com.br, which at the time of submission ranked 226 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is...

Mozilla Multiple Products Multiple Location Headers HTTP Response Splitting (CVE-2011-3000)

An HTTP response splitting vulnerability has been reported in Mozilla Firefox, Thunderbird and SeaMonkey. The vulnerability is due to an error in the way the applications handle HTTP responses with multiple location headers. A remote attacker may exploit this vulnerability by enticing users to op...

CoCSoft StreamDown 6.8.0 Buffer Overflow

Stream Down 6.8.0 seh based buffer overflow triggered when processing the server response packet. During the overflow a structured exception handler is overwritten. Module Options msf use exploit/windows/misc/stream/downbof msf undefineddownbof show actions ...actions... msf undefineddownbof set...

Unfixed XSS vulnerability at buscas.casasbahia.com.br

Security researcher NetFuzzer, has submitted on 27/12/2011 a cross-site-scripting XSS vulnerability affecting buscas.casasbahia.com.br, which at the time of submission ranked 4995 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It i...

HP Managed Printing Administration < 2.6.4 Multiple Vulnerabilities

Binary data 6113.prm...

FreeBSD : krb5-appl -- telnetd code execution vulnerability (4ddc78dc-300a-11e1-a2aa-0016ce01e285)

The MIT Kerberos Team reports : When an encryption key is supplied via the TELNET protocol, its length is not validated before the key is copied into a fixed-size buffer. Also see MITKRB5-SA-2011-008. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 2375-1] krb5. krb5-appl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2375-1 [email protected] http://www.debian.org/security/ Florian Weimer December 26, 2011 http://www.debian.org/security/faq -...

ZDI-11-354 : HP Managed Printing Administration jobDelivery Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-354 : HP Managed Printing Administration jobDelivery Multiple Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-11-354 December 22, 2011 - -- CVE ID: CVE-2011-4168 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

Tiki Wiki CMS Groupware Stored Cross-Site-Scripting

Advisory: Tiki Wiki CMS Groupware Stored Cross-Site-Scripting Advisory ID: INFOSERVE-ADV2011-07 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 8.1 & 6.4 LTS affects all current releases Vendor URL: http://info.tiki.org/ Vendor Status: fixed...

Unfixed XSS vulnerability at www.programme.tv

Security researcher Atmon3r, has submitted on 26/12/2011 a cross-site-scripting XSS vulnerability affecting www.programme.tv, which at the time of submission ranked 7471 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currentl...

Exploit for Asterisk Security Advisory AST-2011-013

A Metasploit module is attached that demonstrates how to enumerate Asterisk sip peers that have a nat setting different to the global sip nat setting as described in Asterisk Security Advisory AST-2011-013. The example below finds all peers with nat=yes, but the metasploit module will also work...

[SECURITY] [DSA 2370-1] unbound security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2370-1 [email protected] http://www.debian.org/security/ Florian Weimer December 22, 2011 http://www.debian.org/security/faq -...

ZDI-11-352 : HP Managed Printing Administration jobAcct Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-352 : HP Managed Printing Administration jobAcct Multiple Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-11-352 December 22, 2011 - -- CVE ID: CVE-2011-4166 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - -- Affected Vendors:...

CVE-2011-4862

creationtimestamp| type| source ---|---|--- 2011-12-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18280 2012-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18369 2012-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18368 2018-05-29...

Unfixed XSS vulnerability at www.vipjatt.com

Security researcher Omega Apex, has submitted on 26/12/2011 a cross-site-scripting XSS vulnerability affecting www.vipjatt.com, which at the time of submission ranked 44784 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is...

Unfixed XSS vulnerability at www.ladocumentationfrancaise.fr

Security researcher Atmon3r, has submitted on 26/12/2011 a cross-site-scripting XSS vulnerability affecting www.ladocumentationfrancaise.fr, which at the time of submission ranked 74466 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011...

VUPEN Security Research - Adobe Flash Player &quot;SAlign&quot; Memory Corruption Vulnerability &#40;CVE-2011-2459&#41;

VUPEN Security Research - Adobe Flash Player "SAlign" Memory Corruption Vulnerability CVE-2011-2459 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Adobe Flash Player is a cross-platform browser-based application runtime...

FreeBSD 'telnetd'守护进程远程缓冲区溢出漏洞

Bugtraq ID: 51182 CVE ID：CVE-2011-4862 FreeBSD是一款基于BSD的操作系统。 FreeBSD Telnet协议有一个对数据流进行加密的机制但其加密性不强，不能在任何关键性安全应用上使用 当通过TELNET协议提供加密密钥时，在拷贝密钥到固定缓冲区时没有对其长度进行校验，可触发缓冲区溢出。能连接telnetd守护程序的攻击者可以以守护进程上下文执行任意代码 0 Freebsd 9.0-STABLE Freebsd 9.0-RELEASE Freebsd 9.0-RC3 Freebsd 9.0-RC1 Freebsd 8.2-STABLE...