openSUSE Security Update : swftools (openSUSE-2017-564)

This update for swftools fixes the following issues : - CVE-2017-8400: out-of-bound write of heap data issue bsc1037050 - CVE-2017-8401: out-of-bound read of heap data issue bsc1037051 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in lib/png.c:755 within png_load(), triggered by a malformed PNG handled by png2swf. The issue could be exploited to cause DoS and, per the CVE description, may lead to arbitrary code execution. Public advisories (Mageia MGASA-2017-...

CVE-2016-8400

An information disclosure vulnerability in the NVIDIA librm library libnvrm could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions:...

Information disclosure

An information disclosure vulnerability in the NVIDIA librm library libnvrm could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions:...

CVE-2016-8400

CVE-2016-8400 describes an information-disclosure vulnerability in the NVIDIA librm library (libnvrm) on Android (Kernel 3.18). A local malicious application could read data outside its permission levels due to improper memory handling in LIBNVRM, potentially exposing sensitive data. The vulnerab...

openSUSE Security Update : shellinabox (openSUSE-2016-1501)

shellinabox was updated to version 2.20 to fix the following security issues : - It was possible to fallback to the HTTP protocol even when configured for HTTPS. CVE-2015-8400, boo957748 - Disable secure client-initiated renegotiation - Set SSL options for increased security disable SSLv2, SSLv3 ...

Fedora 22 : shellinabox-2.19-1.fc22 (2015-463143720f)

Added support for middle-click paste Improved iOS support New logic to enable soft keyboard icon Disable HTTPS fallback using the URL /plain. Consequently disables automatic upgrades from HTTP to HTTPS CVE-2015-8400 Note that Tenable Network Security has extracted the preceding description block...

Fedora 23 : shellinabox-2.19-1.fc23 (2015-1c773e8702)

Added support for middle-click paste Improved iOS support New logic to enable soft keyboard icon Disable HTTPS fallback using the URL /plain. Consequently disables automatic upgrades from HTTP to HTTPS CVE-2015-8400 Note that Tenable Network Security has extracted the preceding description block...

CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

CVE-2015-8400

Shell In A Box (shellinabox) prior to version 2.19 contains an HTTPS fallback mechanism that allows DNS rebinding attacks via the /plain URL. The vulnerability is triggered when the client can revert HTTPS requests to HTTP, enabling remote attackers to exploit DNS rebinding. Public references in ...

Fedora Update for shellinabox FEDORA-2015-1

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4653

Multiple cross-site scripting XSS vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch 8670 Automated Message Delivery System AMDS before 6.7, Omnitouch 8460 Advanced Communication Server before 9.1, and...

Code injection

The Xerox Phaser 8400 allows remote attackers to cause a denial of service reboot via an empty UDP packet to port 1900...

CVE-2008-3571

The Xerox Phaser 8400 allows remote attackers to cause a denial of service reboot via an empty UDP packet to port 1900...

CVE-2008-3571

CVE-2008-3571 affects the Xerox Phaser 8400. It enables a remote denial of service (reboot) via an empty UDP packet to port 1900. The NVD lists this as a network, low-ability to exploit, no authentication, with a high impact (availability complete) and a base score of 7.8 (CVSS v2.0). No further ...

CVE-2008-3571

The Xerox Phaser 8400 allows remote attackers to cause a denial of service reboot via an empty UDP packet to port 1900...

Xerox Phaser 8400空UDP报文远程拒绝服务漏洞

BUGTRAQ ID: 30522 CNCAN ID：CNCAN-2008080503 Xerox Phaser 8400是一款功能强大的复印机。 Xerox Phaser 8400网络接口处理空UDP报文存在问题，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 提交空UDP报文可导致打印机重新启动，持续的攻击可造成拒绝服务攻击。 Xerox Phaser 8400 目前没有解决方案提供： http://www.office.xerox.com/printers/color-printers/phaser-8400/enus.html !/usr/bin/perl carved-out...

xeroxphaser-dos.txt

!/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently, if you send an empty packet to a Xerox Phaser 8400...

Xerox Phaser 8400 (reboot) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently, if you send an...

Xerox Phaser 8400 - Remote Reboot (Denial of Service)

!/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently, if you send an empty packet to a Xerox Phaser 8400...