CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...

CVE-2011-4896

Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port...

CVE-2011-2768

CVE-2011-2768 affects Tor before 0.2.2.34 when configured as a client or bridge. The vulnerability arises because Tor may send a TLS certificate chain as part of an outgoing OR connection, enabling remote relays to read the chain and infer the client’s entry guard set, thereby compromising anonym...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, builds circuits in a way that differs from client circuits, making it easier for remote attackers to enumerate bridges by observing circuit construction. Affects Tor code path used for bridges; vulnerability achieved through the bridge-circuit set...

CVE-2011-4897

CVE-2011-4897 : Affects Tor before 0.2.2.25-alpha when configured as a relay without the Nickname option; it uses the local hostname as the Nickname, exposing potentially sensitive information to remote readers. Connected advisories consistently describe the same behavior and impact. Some entries...

CVE-2011-2778

Tor vulnerability CVE-2011-2778 involves a heap-based buffer overflow in or/buffers.c that could allow remote code execution or memory corruption when using SocksPort or SOCKS proxy configuration. Affected product: Tor. Impact: remote attacker may cause memory corruption or execute arbitrary code...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...

CVE-2011-2769

Affected software: Tor prior to 0.2.2.34. Issue: When Tor is configured as a bridge, it accepts CREATE and CREATE_FAST in a cell’s Command field within an OR connection it initiated, enabling remote relays to enumerate bridges. Impact: Bridge enumeration could reveal bridge presence to adversarie...

CVE-2011-4897

Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value...

Novell iPrint Client ActiveX Control GetDriverSettings Stack Overflow

Added: 12/23/2011 CVE: CVE-2011-3173 BID: 50367 OSVDB: 76631 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Client ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the ActiveX contr...

Novell iPrint Client ActiveX Control GetDriverSettings Stack Overflow

Added: 12/23/2011 CVE: CVE-2011-3173 BID: 50367 OSVDB: 76631 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Client ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the ActiveX contr...

CVE-2011-5195

creationtimestamp| type| source ---|---|--- 2011-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18266...

CentOS 6 : squid (CESA-2011:1791)

An updated squid package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS 6 : jasper (CESA-2011:1807)

Updated jasper packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 6 : dhcp (CESA-2011:1819)

Updated dhcp packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

FreeBSD-SA-11:08.telnetd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:08.telnetd Security Advisory The FreeBSD Project Topic: telnetd code execution vulnerability Category: core Module: contrib Announced: 2011-12-23 Affects: All...

FreeBSD-SA-11:06.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:06.bind Security Advisory The FreeBSD Project Topic: Remote packet Denial of Service against named8 servers Category: contrib Module: bind Announced: 2011-12-2...

RHEL 6 : kernel (RHSA-2011:1849)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1849 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fix: Using the SGIO IOCTL to issue SCSI...

VulnCheck KEV: CVE-2011-4862

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

Ubuntu: Security Advisory (USN-1310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...