Fixed in Apache Tomcat 7.0.40

Moderate: Information disclosure CVE-2013-2071 Bug 54178 described a scenario where elements of a previous request may be exposed to a current request. This was very difficult to exploit deliberately but fairly likely to happen unexpectedly if an application used AsyncListeners that threw...

CentOS Update for kernel CESA-2013:0168 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 5 : kernel (CESA-2013:0168)

Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RedHat Update for kernel RHSA-2013:0168-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...

RHEL 5 : kernel (RHSA-2013:0168)

Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

kernel security and bug fix update

kernel 2.6.18-348.1.1 - pci intel-iommu: reduce max num of domains supported Don Dutile 886876 885125 - fs gfs2: Fix leak of cached directory hash table Steven Whitehouse 886124 831330 - x86 mm: randomize SHLIBBASE Petr Matousek 804953 804954 CVE-2012-1568 - net be2net: create RSS rings even in...

Medium: kernel, nvidia

Issue Overview: A malicious Network File System version 4 NFSv4 server could return a crafted reply to a GETACL request, causing a denial of service on the client. CVE-2012-2375, Moderate A divide-by-zero flaw was found in the TCP Illinois congestion control algorithm implementation in the Linux...

RedHat Update for kernel RHSA-2012:1580-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for kernel CESA-2012:1580 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Linux kernel ipv6分片拒绝服务漏洞(CVE-2012-4444)

CVE ID:CVE-2012-4444 Linux是一款开源的操作系统。 Linux Kernel net/ipv6/reassembly.c中的ip6fragqueue函数处理重叠分片存在安全漏洞，攻击者可利用此漏洞绕过目标防火墙安全限制，访问未授权资源。 0 Linux kernel 2.6.36之前版本 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： https://github.com/torvalds/linux/commit/70789d7052239992824628db8133de08dc78e593...

CVE-2012-4444

The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping IPv6 fragments...

CVE-2012-4444

The CVE-2012-4444 issue affects the Linux kernel prior to 2.6.36, where the ip6_frag_queue function in net/ipv6/reassembly.c can be exploited remotely to bypass certain network restrictions by sending overlapping IPv6 fragments. The vulnerability is consistently described in multiple sources (Lin...

RHEL 6 : kernel (RHSA-2012:1580)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1580 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: It wa...

Linux Kernel IPv6远程安全绕过漏洞(CVE-2012-4444)

BUGTRAQ ID: 56891 CVECAN ID: CVE-2012-4444 Linux Kernel是Linux操作系统的内核。 Linux Kernel在IPv6的实现上存在安全绕过漏洞，攻击者可利用此漏洞绕过目标防火墙安全限制，并发送恶意网络报文到受影响计算机。 0 Linux kernel = 3.3.5 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/ Ubuntu ------ Ubuntu已经为此发布了一个安全公告（USN-1664-1）以及相应补丁:...

CVE-2012-4444

The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping IPv6 fragments...

Windows ms08-067 缓冲区溢出漏洞

No description provided by source. !/usr/bin/env python coding=utf-8 import struct import sys import socket from threading import Thread Thread is imported incase you would like to modify the src to run against multiple targets from urlparse import urlparse try: from impacket import smb from...

FileBound 6.2 - Local Privilege Escalation

FileBound 6.2 - Local Privilege Escalation Sense of Security - Security Advisory - SOS-12-010 Release Date. 10-Oct-2012 Last Update. - Vendor Notification Date. 14-Aug-2012 Product. FileBound On-Site Platform. Windows Affected versions. All versions prior to 6.2 Severity Rating. High Impact...

CVE-2012-2561

HP Business Service Management BSM 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444...

EasyFTP Server 1.7.0.11 - APPE Remote Buffer Overflow

EasyFTP Server 1.7.0.11 - APPE Remote Buffer Overflow !/usr/bin/env python -- coding: latin-1 -- / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // nullsecurity team Easy FTP server remote exploit DATE 03/03/2012 DESCRIPTION Easy FTP Server - "APPE" command buffer overflow -...

Sysax Multi Server 5.53 SFTP Post Auth SEH Exploit (Egghunter)

Exploit for windows platform in category remote exploits Sysax Multi Server version 5.53 SFTP post authentication SEH exploit with egghunter shellcode that binds a shell to port 4444. !/usr/bin/python Title: Sysax Multi Server 5.53 SFTP Post Auth SEH Exploit Egghunter Author: Craig Freyman @cd1zz...