Important: krb5

Issue Overview: An uninitialized pointer use flaw was found in the way the MIT Kerberos KDC handled initial authentication requests AS-REQ. A remote, unauthenticated attacker could use this flaw to crash the KDC via a specially-crafted AS-REQ request. CVE-2012-1015 A NULL pointer dereference flaw...

Debian DSA-2518-1 : krb5 - denial of service and remote code execution

Emmanuel Bouillon from NCI Agency discovered multiple vulnerabilities in MIT Kerberos, a daemon implementing the network authentication protocol. - CVE-2012-1014 By sending specially crafted AS-REQ Authentication Service Request to a KDC Key Distribution Center, an attacker could make it free an...

CVE-2012-1014

The processasreq function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service uninitialized pointer dereference and daemon crash or possibly execute arbitrary...

PT-2012-1074

Name of the Vulnerable Software and Affected Versions krb5 versions 1.8.x through 1.9.x before 1.9.5 krb5 versions 1.10.x before 1.10.3 krb5-1.9 versions krb5-workstation-1.9 versions krb5-debuginfo-1.9 versions krb5-libs-1.9 versions krb5-devel-1.9 versions krb5-server-1.9 versions...

DSA-2518-1 krb5 - denial of service

Bulletin has no description...

CVE-2011-4584

The MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote authenticated users to impersonate other user accounts by using the Login As feature in conjunction with a remote MNET single sign-on capability, as demonstrated by a Maha...

PT-2012-1916 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.14 Moodle versions 2.0.x through 2.0.5 Moodle versions 2.1.x through 2.1.2 Description: The MNET authentication functionality allows remote authenticated users to impersonate other user accounts by using the...

Quagga < 0.99.12 BGPD Denial of Service Vulnerability

According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by a denial of service vulnerability. The issue can be triggered via an AS path containing ASN elements whose string representation is longer than expected. C Tenable...

CVE-2011-5093

Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated users to bypass intended access restrictions and execute arbitrary code by leveraging access to a privileged account, a different vulnerability than...

Ubuntu Update for quagga USN-1441-1

Ubuntu Update for Linux kernel vulnerabilities USN-1441-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14411.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for quagga USN-1441-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Snort 2 - DCE/RPC Preprocessor Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Snort 2 DCE/RPC preprocessor Buffer...

PT-2012-1082

Name of the Vulnerable Software and Affected Versions Quagga versions prior to 0.99.20.1 Quagga versions prior to 0.99.22.4 Description The issue concerns multiple vulnerabilities in the Quagga package, which can lead to disruption of confidentiality, integrity, and availability of protected...

targets-asn NSE Script

Produces a list of IP prefixes for a given routing AS number ASN. This script uses a whois server database operated by the Shadowserver Foundation. We thank them for granting us permission to use this in Nmap. Output is in CIDR notation. Script Arguments targets-asn.whoisport The whois port to us...

GLSA-201202-02 : Quagga: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201202-02 Quagga: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Quagga. Please review the CVE identifiers referenced below for details. Impact : A BGP peer could send a Route-Refresh message with...

SureBackup fails: Failed to call RPC function - Access is Denied

Challenge When the Veeam vPower NFS Service on the Mount Server used by the SureBackup job is set to use any account other than Local SystemThe default configuration is for the Veeam vPower NFS Service to "Log On As" the 'Local System' account., and that account is not a member of the Local...

McAfee Security-as-a-Service ActiveX控件远程命令执行漏洞

BUGTRAQ ID: 51397 McAfee Security-as-a-Service是云综合性保护解决方案。 McAfee SaaS的ActiveX控件在实现上存在安全漏洞，MyCioScan.Scan.ShowReport在没有验证的情况下直接执行了传递到函数的命令，远程攻击者可利用此漏洞执行任意代码。 0 McAfee Security-as-a-Service 厂商补丁： McAfee ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mcafee.com/...

McAfee SaaS MyCioScan ShowReport Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "McAfee SaaS...

CVE-2011-4577

OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service assertion failure via an X.509 certificate containing certificate-extension data associated with 1 IP address blocks or 2 Autonomous System AS identifiers...

CVE-2011-4577

OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service assertion failure via an X.509 certificate containing certificate-extension data associated with 1 IP address blocks or 2 Autonomous System AS identifiers...

CVE-2011-4577

OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service assertion failure via an X.509 certificate containing certificate-extension data associated with 1 IP address blocks or 2 Autonomous System AS identifiers...