UBUNTU-CVE-2014-9296

The receive function in ntpproto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets...

OpenVPN 2.2.29 - Shellshock Remote Command Injection

OpenVPN 2.2.29 - Shellshock Remote Command Injection Exploit Title: ShellShock OpenVPN Exploit Date: Fri Oct 3 15:48:08 EDT 2014 Exploit Author: hobbily AKA @fj33r Version: 2.2.29 Tested on: Debian Linux CVE : CVE-2014-6271 Probably should of submitted this the day I tweeted it. server.conf port...

vino: denial of service flaw

The vinoserverclientdatapending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial ...

CVE-2013-5745

The vinoserverclientdatapending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial ...

DEBIAN-CVE-2013-5745

The vinoserverclientdatapending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial ...

Axway Email Firewall information leakage

Different authentication error codes for existant and non-existant user...

User authentication failed

When a Linux server is added to the console, the "User authentication failed" error occurs...

AzeoTech DAQFactory Denial of Service Vulnerability

This host is installed with AzeoTech DAQFactory and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbazeotechdaqfactorydosvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ AzeoTech DAQFactory Denial of Service Vulnerability Authors: Madhuri D Copyright: Copyright c 2011...

DSA-2108-1 cvsnt - arbitrary code execution

Bulletin has no description...

freeSSHd Pre-Authentication Error Remote DoS Vulnerability

This host has freeSSHd installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodfreesshdpreauthdosvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ freeSSHd Pre-Authentication Error Remote DoS Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod...

Adobe RoboHelp Server Unspecified Vulnerability

This host is running Adobe RoboHelp Server and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbadoberobohelpserverunspecifiedvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Adobe RoboHelp Server Unspecified Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbo...

Gentoo Security Advisory GLSA 200606-14 (gdm)

The remote host is missing updates announced in advisory GLSA 200606-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Host Integration Server Remote Command Execution (MS08-059; CVE-2008-3466)

Microsoft Host Integration Server HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging, and security systems. A remote code execution vulnerability has been...

Hewlett Packard Integrated Lights Out远程未授权访问漏洞

HP ProLiant Integrated Lights Out是一款可实现服务器远程管理的固件。 HP ProLiant Integrated Lights Out存在验证错误，远程攻击者可以利用漏洞未授权访问设备，管理服务器。 目前没有详细漏洞细节提供。 HP ProLiant Integrated Lights Out 2 1.11 HP ProLiant Integrated Lights Out 2 1.00 HP ProLiant Integrated Lights Out 1.87 HP ProLiant Integrated Lights Out 1.70...

CVE-2006-5779

OpenLDAP before 2.3.29 is vulnerable to a denial-of-service due to an assertion failure triggered by LDAP BIND requests with long authcid names. The bug lies in libldap’s handling of the authcid string during Bind Requests, allowing remote attackers to crash the daemon. Affected releases are Open...

SUSE-SA:2005:012: imap

The remote host is missing the patch for the advisory SUSE-SA:2005:012 imap. The University of Washington imap daemon can be used to access mails remotely using the IMAP protocol. This update fixes a logical error in the challenge response authentication mechanism CRAM-MD5 used by UW IMAP. Due to...

Moderate: Red Hat Security Advisory: imap security update

Updated imap packages to correct a security vulnerability in CRAM-MD5 authentication are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The imap package provides server daemons for both the IMAP...

CVE-2005-0198

A logic error in the CRAM-MD5 code for the University of Washington IMAP UW-IMAP server, when Challenge-Response Authentication Mechanism with MD5 CRAM-MD5 is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticat...

[SA13302] BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability

TITLE: BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA13302 VERIFY ADVISORY: http://secunia.com/advisories/13302/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: BNC IRC proxy 2.x http://secunia.com/product/1622/...

Nortel Networks Contivity VPN Client information leakage vulnerability

Overview The Nortel Networks Contivity VPN Client authentication error message provide additional information that may be useful to an attacker. Description The Nortel Networks Contivity VPN Client software provides an encrypted and authenticated VPN connection from a client system to a Nortel...