CVE-2013-6958

Juniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death screen is disabled, allows remote attackers to cause a denial of service via a crafted packet...

JVN#28436508: Juniper ScreenOS vulnerable to denial-of-service (DoS)

ScreenOS provided by Juniper Networks contains a denial-of-service DoS vulnerability. Impact When processing a malicious packet, the device may hang. Solution Enable the "Ping of Death Screen" Enable the "Ping of Death Screen" setting according to the information provided by the developer...

CVE-2013-4548

The mmnewkeysfromblob function in monitorwrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet dat...

CVE-2013-4548

The mmnewkeysfromblob function in monitorwrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet dat...

rpcbind CALLIT UDP Crash

!/usr/bin/ruby rpcbindudpcrashpoc.rb 07/15/2013 Sean Verity CVE 2013-1950 rpcbind CALLIT Procedure UDP Crash PoC Affected Software Package: rpcbind-0.2.0-19 Tested on: Fedora 17 3.9.8-100.fc17.x8664 1 SMP CentOS 6.3 Final 2.6.32-279.22.1.el6.x8664 1 SMP rpcbind can be crashed by setting the...

rpcbind - CALLIT procedure UDP Crash (PoC)

rpcbind - CALLIT procedure UDP Crash PoC !/usr/bin/ruby rpcbindudpcrashpoc.rb 07/15/2013 Sean Verity CVE 2013-1950 rpcbind CALLIT Procedure UDP Crash PoC Affected Software Package: rpcbind-0.2.0-19 Tested on: Fedora 17 3.9.8-100.fc17.x8664 1 SMP CentOS 6.3 Final 2.6.32-279.22.1.el6.x8664 1 SMP...

rpcbind (CALLIT Procedure) UDP Crash PoC

rpcbind CALLIT procedure UDP denial of service proof of concept exploit. !/usr/bin/ruby rpcbindudpcrashpoc.rb 07/15/2013 Sean Verity CVE 2013-1950 rpcbind CALLIT Procedure UDP Crash PoC Affected Software Package: rpcbind-0.2.0-19 Tested on: Fedora 17 3.9.8-100.fc17.x8664 1 SMP CentOS 6.3 Final...

CVE-2012-3286

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

Fedora 17 : nss-3.14.1-3.fc17 (2013-0271)

Pick up NSS release that distrusts the mis-issued Turktrust intermediates Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4.7 c++ issue in secmodt.h which actually undoes the upstream fix. Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4....

Fedora 18 : nss-3.14.1-3.fc18 (2013-0173)

Pick up NSS release that distrusts the mis-issued Turktrust intermediates Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4.7 c++ issue in secmodt.h which actually undoes the upstream fix. Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4....

Fedora 16 : nss-3.14.1-3.fc16 (2013-0261)

Pick up NSS release that distrusts the mis-issued Turktrust intermediates Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4.7 c++ issue in secmodt.h which actually undoes the upstream fix. Rebase pem sources to pick up two bug fixes from rhel-6.3 Remove fix for gcc 4....

IDA Pro 6.3 - Crash (PoC)

/ IDA Pro 6.3 crash due an internal error ELF anti-debugging/reversing patcher Published @ IOActive Labs Research blog: http://blog.ioactive.com/2012/12/striking-back-gdb-and-ida-debuggers.html - nitr0us http://twitter.com/nitr0usmx Tested under: IDA Pro Starter License 6.3.120531 Mac OS X IDA Pr...

HP SiteScope Remote Code Execution

This module exploits a code execution flaw in HP SiteScope. It exploits two vulnerabilities in order to get its objective. An authentication bypass in the create operation, available through the APIPreferenceImpl AXIS service, to create a new account with empty credentials and, subsequently, uses...

CVE-2008-7312

The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP request, as demonstrated by a request to a compromised server associated with a specific IP address...

CVE-2012-2587

CVE-2012-2587 affects AfterLogic MailSuite Pro 6.3. The connected documents confirm multiple cross-site scripting (XSS) vulnerabilities where an attacker can inject arbitrary web script or HTML via an e-mail message body by crafting a SRC attribute on (1) an IFRAME or (2) a SCRIPT element. This i...

389 security update

CentOS Errata and Security Advisory CESA-2012:0813 Updated 389-ds-base packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Commo...

CVE-2012-0301

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Session fixation

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-0301

Symantec Message Filter’s Brightmail Control Center (web interface) 6.3 is tied to CVE-2012-0301, a session-fixation vulnerability that can allow an attacker to hijack a legitimate user session via unspecified vectors. The linked open-source advisories and vendor notes confirm that this issue aff...