CVE-2012-2134

CVE-2012-2134 affects bind-dyndb-ldap (LDAP back-end plug-in) in MiracleLinux 4 and similar builds. The vulnerability arises from improper handling of LDAP query errors in handle_connection_error, which can cause an infinite loop and hang of the named server when a non-alphabet character appears ...

Apache Tomcat 7.0.0 < 7.0.50 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 7.0.50. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat7.0.50security-7 advisory. - Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in...

Linux Kernel 'tcp_rcv_state_process()'函数拒绝服务漏洞

BUGTRAQ ID: 65654 CVECAN ID: CVE-2012-6638 Linux Kernel是Linux操作系统的内核。 Linux kernel 3.2.24之前版本net/ipv4/tcpinput.c内的tcprcvstateprocess函数在处理大量的SYN+FIN TCP数据包时，存在越界访问错误，远程攻击者可利用此漏洞造成拒绝服务。 0 Linux kernel 3.2.24 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Interpretation of the Bible – exploits the intermediate level skills of analysis-vulnerability warning-the black bar safety net

Inscription: From the last update feel has been a long, long time, and what time less are excuses himself becomes the lazy's true, give us an apology, after the update will speed up, today do not speak the vulnerability analysis, with me to discuss the exploits of some of the principles on the...

Oracle Forms and Reports - Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class Metasploit3 'Oracle Forms and Reports Remote Code Execution', 'Description' = %q This module uses two vulnerabilities in Oracle form...

CVE-2012-3152

creationtimestamp| type| source ---|---|--- 2014-02-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31737 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oraclereportsrce.rb 2021-11-08 08:58:19+00:00| seen|...

Updated mongodb package fixes security vulnerability

A possible DoS issue was discovered in MongoDB CVE-2012-6619. The --objcheck command line switch has now been enabled by default in the mongod service as a protective measure...

CVE-2012-0270

Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted 1 hetro file to the getnum function in util/hetimain.c or 2 PVOC file to the getnum function in util/pvimport.c...

CVE-2012-0270

Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted 1 hetro file to the getnum function in util/hetimain.c or 2 PVOC file to the getnum function in util/pvimport.c...

CVE-2012-0270

CVE-2012-0270 affects Csound prior to 5.16.6, caused by stack-based buffer overflows in getnum() (util/heti_main.c and util/pv_import.c). Exploitation via specially crafted hetro and pvoc files can lead to remote code execution. Remediation: upgrade to Csound 5.16.6 or later; patches referenced i...

CVE-2012-5054

creationtimestamp| type| source ---|---|--- 2014-02-17 10:36:36+00:00| seen| MISP/5301e1b4-38e0-4603-a6ec-8454950d2109 2014-11-13 09:56:43+00:00| seen| MISP/54645d0f-5a88-4160-9416-5694950d210b 2020-10-09 17:35:18+00:00| seen| MISP/412b011d-08c3-4029-bf77-4ebac76d5e1b 2023-06-14 21:10:03+00:00|...

Microsoft Windows SMB Registry : Windows 8.1 / Server 2012 R2 Service Pack Detection

It was possible to determine the service pack version of the Windows 8.1 / Server 2012 R2 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72543; scriptversion"1.5";...

Fedora 19 : pidgin-2.10.9-1.fc19 (2014-1999)

Update to 2.10.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora Update for pidgin FEDORA-2014-1999

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-6638

The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service kernel resource consumption via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663...

CVE-2012-6638

The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service kernel resource consumption via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663...

CVE-2012-2663

extensions/libxttcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant...

BELL-CVE-2012-6638 CVE-2012-6638 does not affect BellSoft software

Bulletin has no description...

Code injection

The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service kernel resource consumption via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663...

CVE-2012-2663

extensions/libxttcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant...