Ubuntu: Security Advisory (USN-2837-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : bind (SSA:2015-349-01)

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-349-01. The text itsel...

Amazon Linux AMI : bind (ALAS-2015-631)

An error in the parsing of incoming responses allows some records with an incorrect class to be be accepted by BIND instead of being rejected as malformed. This can trigger a REQUIRE assertion failure when those records are subsequently cached. Intentional exploitation of this condition is possib...

[SECURITY] [DSA 3420-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3420-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

CVE-2015-8000

db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a malformed class attribute...

CVE-2015-6307

Cisco FirePOWER formerly Sourcefire 7000 and 8000 devices with software 5.4.0.1 allow remote attackers to cause a denial of service inspection-engine outage via crafted packets, aka Bug ID CSCuu10871...

CVE-2015-6307

Cisco FirePOWER (formerly Sourcefire) 7000 and 8000 series devices running software 5.4.0.1 are affected by CVE-2015-6307. The vulnerability allows an unauthenticated, adjacent attacker to cause the inspection engine to stall or stop processing packets by sending crafted packets, potentially resu...

CVE-2015-6307

Cisco FirePOWER formerly Sourcefire 7000 and 8000 devices with software 5.4.0.1 allow remote attackers to cause a denial of service inspection-engine outage via crafted packets, aka Bug ID CSCuu10871...

Cisco TelePresence MSE 8000 Device Cross-Site Request Forgery Vulnerability

The Cisco TelePresence MSE 8000 devices are a suite of high-capacity voice and video conferencing media services engine appliances. A cross-site request forgery vulnerability exists in the Cisco TelePresence MSE 8000 devices, which allows remote attackers to construct malicious URIs, trick users...

CVE-2015-4258

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444...

CVE-2015-4258

The CVE-2015-4258 CSRF vulnerability affects Cisco TelePresence MSE 8000 Series. The issue arises from insufficient CSRF protection, enabling unauthenticated remote attackers to trick users into performing actions within the web interface, effectively hijacking user sessions. Affected component i...

CVE-2015-4258

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444...

Cisco TelePresence MSE 8000 Series Cross-Site Request Forgery Vulnerability

A vulnerability in the Cisco TelePresence MSE 8000 Series could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to insufficient cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking the user of a web...

Fortinet Single Sign On collectoragent.exe stack buffer overflow vulnerability

Fortinet Single Sign On FSSO is a single sign-on solution for Fortinet devices. A stack buffer overflow vulnerability in collectoragent.exe in versions prior to Fortinet Single Sign On FSSO build 164 allows remote attackers to send a specially crafted PROCESSHELLO message to TCP port 8000 to...

Stack overflow

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On FSSO before build 164 allows remote attackers to execute arbitrary code via a large PROCESSHELLO message to the Message Dispatcher on TCP port 8000...

CVE-2015-2281

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On FSSO before build 164 allows remote attackers to execute arbitrary code via a large PROCESSHELLO message to the Message Dispatcher on TCP port 8000...

CVE-2015-2281

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On FSSO before build 164 allows remote attackers to execute arbitrary code via a large PROCESSHELLO message to the Message Dispatcher on TCP port 8000...

CVE-2015-2281

Fortinet Single Sign On (FSSO) collectoragent.exe is affected by a stack-based buffer overflow in the Message Dispatcher when processing a PROCESS_HELLO message. This vulnerable path exists in FSSO builds preceding 164 and allows remote, unauthenticated attackers to execute arbitrary code via a c...