AIX OpenSSH Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Feb 21 11:19:24 CDT 2014 | Updated: Wed Apr 16 17:55:12 CDT 2014 | Update: Clarified the affected OpenSSH version The most recent version of this document is available here:...

openSUSE: Security Advisory for openssh (openSUSE-SU-2013:1726-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 7 package openssh version 5.9p1-alt7

5.9p1-alt7 built Dec. 9, 2013 Dmitry V. Levin in task 110259 Nov. 8, 2013 Dmitry V. Levin - sshd: applied upstream initialization fix CVE-2013-4548...

openssh: security fix for remote code execution with AES-GCM (important)

openssh was updated to fix a memory corruption when AES-GCM is used which could lead to remote code execution after successful authentication. CVE-2013-4548...

[BSA-087] Security Update for openssh

Colin Watson uploaded new packages for openssh which fixed the following security problems: CVE-2013-4548 A memory corruption vulnerability exists in the post-authentication sshd process when an AES-GCM cipher [email protected] or [email protected] is selected during kex exchange. If...

CVE-2013-4548

CVE-2013-4548 affects OpenSSH sshd 6.2/6.3 when using AES-GCM. The bug is in mm_newkeys_from_blob (monitor_wrap.c) where memory for a MAC context isn’t initialized, allowing remote authenticated users to bypass ForceCommand and login-shell restrictions via crafted packet data. Several connected s...

Security fix for the ALT Linux 8 package openssh version 5.9p1-alt7

Nov. 8, 2013 Dmitry V. Levin 5.9p1-alt7 - sshd: applied upstream initialization fix CVE-2013-4548...

CVE-2013-4548

The mmnewkeysfromblob function in monitorwrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet dat...

Fedora Update for cgit FEDORA-2013-9522

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for update openSUSE-SU-2012:1460-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201214601.nasl 8509 2018-01-24 06:57:46Z teissa $ SuSE Update for update openSUSE-SU-2012:1460-1 update Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

SuSE Update for update openSUSE-SU-2012:1461-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201214611.nasl 8336 2018-01-09 07:01:48Z teissa $ SuSE Update for update openSUSE-SU-2012:1461-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

openSUSE: Security Advisory for update (openSUSE-SU-2012:1461-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for cgit FEDORA-2012-18464

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2012-18464 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CVE-2012-4548

Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command...

CVE-2012-4548

CVE-2012-4548 affects cgit up to version 9.0.3, via an argument injection in syntax-highlighting.sh that allows remote authenticated users with file-adding permissions to execute arbitrary commands through the --plug-in argument to the highlight command. Root cause: improper handling of plugin ar...

CVE-2011-4548

CVE-2011-4548 concerns Google Chrome before 16.0.912.44 on Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms. The connected records provide limited details: the vulnerability family is described as multiple unspecified vulnerabilities with unknown impact and attack vectors on these pla...

CVE-2010-4548

CVE-2010-4548 affects IBM Lotus Notes Traveler prior to 8.5.1.2. A remote authenticated user can cause a denial of service (daemon crash) by first accepting a meeting invitation with an iNotes client and then accepting the same invitation with an iPhone client. The available sources confirm this ...

CVE-2009-4548

ViArt Helpdesk 3.x is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue can be triggered by user-supplied input in several parameters: category_id to products.php, article.php, product_details.php, or reviews.php; forum_id to forum.php; and search_category_id to products_...

CVE-2009-4548

creationtimestamp| type| source ---|---|--- 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34495 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34499 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34497 2009-08-10...

CVE-2008-4548

CVE-2008-4548 affects RTS Sentry 2.1.0.2 via the PTZCamPanelCtrl ActiveX (CamPanel.dll). The root cause is a stack-based buffer overflow triggered by a long second argument to ConnectServer, enabling remote code execution. Public references (NVD, CVE lists, exploit-db) confirm the vulnerability a...