Cyberoam Unified Threat Management: Insecure Password Handling

Hi, Please find below the details of a vulnerability I discovered in Cyberoam UTM device. The Vendor was notified, however I did not receive any response from Vendor despite repeated email reminders. SECURITY ADVISORY: cyberoam-utm-insecure-password-handling Affected Software: Cyberoam CR50ia...

Cyberoam UTM - Multiple Vulnerabilities

SECURITY ADVISORY: cyberoam-utm-command-executaion Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and productivity to...

Pakistani Hackers attacks 31 government and 46 educational institutions Websites

Pakistani Hackers attacks 31 government and 46 educational institutions Websites Maharashtra police said, websites of more than 46 educational institutions and 31 government websites based in the district were allegedly hacked by a group reportedly based in Pakistan. KhantastiC, a hacker who...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the orderedmalloc function in boost/pool/pool.hpp. An attacker can perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated...

Asterisk - ast_parse_digest() Stack Buffer Overflow (PoC)

Asterisk - astparsedigest Stack Buffer Overflow PoC =========================== Description =========================== There is a remotely exploitable stack buffer overflow in HTTP digest authentication handling in Asterisk. This vulnerability includes the possibility of code execution with plen...

FreeBSD Security Advisory (FreeBSD-SA-11:07.chroot.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-11:07.chroot.asc SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cyberoam Central Console 2.00.2 - Remote File Inclusion

Cyberoam Central Console 2.00.2 - Remote File Inclusion Title: ====== Cyberoam Central Console v2.00.2 - File Include Vulnerability Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=405 VL-ID: ===== 405 Introduction: ============= Cyberoam Central...

Security fix for the ALT Linux 5 package fetchmail version 6.3.21-alt1.0.M50P.1

Dec. 1, 2011 Gleb Fotengauer-Malinovskiy 6.3.21-alt1.0.M50P.1 - Backport to p5 branch CVE-2011-1947...

osCSS2 "_ID" parameter Local file inclusion

Advisory: osCSS2 "ID" parameter Local file inclusion Advisory ID: SSCHADV2011-034 Author: Stefan Schurtz Affected Software: Successfully tested on osCSS2 2.1.0 latest version Vendor URL: http://oscss.org/ Vendor Status: Fixed in svn branche 2.1.0 and reported in develop version 2.1.1...

osCSS2 2.1.0 Local File Inclusion

Advisory: osCSS2 "ID" parameter Local file inclusion Advisory ID: SSCHADV2011-034 Author: Stefan Schurtz Affected Software: Successfully tested on osCSS2 2.1.0 latest version Vendor URL: http://oscss.org/ Vendor Status: Fixed in svn branche 2.1.0 and reported in develop version 2.1.1...

FreeBSD Security Advisory (FreeBSD-SA-11:04.compress.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-11:04.compress.asc ADV FreeBSD-SA-11:04.compress.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-11:04.compress.asc Authors: Thomas Reinke Copyright: Copyright c...

Security fix for the ALT Linux 5 package pidgin-mini version 2.10.0-alt0.M50P.1

Oct. 3, 2011 Gleb Fotengauer-Malinovskiy 2.10.0-alt0.M50P.1 - Backport to p5 branch new version, CVE-2011-2485...

Security fix for the ALT Linux 6 package cyrus-imapd version 2.4.11-alt0.M60P.1

Sept. 14, 2011 Andrey Cherepanov 2.4.11-alt0.M60P.1 - Backport to p6 branch fixes CVE-2011-3208...

Security fix for the ALT Linux 5 package pidgin-mini version 2.9.0-alt2.M50P.1

Aug. 23, 2011 Gleb Fotengauer-Malinovskiy 2.9.0-alt2.M50P.1 - backport to p5 branch CVE-2011-2485...

dbus security update

1:1.2.24-5 - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 - Resolves: 725313...

roundcube -- XSS vulnerability

RoundCube development Team reports: We just published a new release which fixes a recently reported XSS vulnerability as an update to the stable 0.5 branch. Please update your installations with this new version or patch them with the fix which is also published in the downloads section or our...

Fedora 14 : apr-1.4.5-1.fc14 (2011-6918)

Move to 1.4.x branch. Various bug fixes since 1.4.2. Security: CVE-2011-0419 Reimplement aprfnmatch from scratch using a non-recursive algorithm; now has improved compliance with the fnmatch spec. Note: 1.4.3 was never officially released. Fix CVE-2011-1928 introduced in 1.4.4. Note that Tenable...

FreeBSD-SA-11:01.mountd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:01.mountd Security Advisory The FreeBSD Project Topic: Network ACL mishandling in mountd8 Category: core Module: mountd Announced: 2011-04-20 Credits: Ruslan...

Security fix for the ALT Linux 5 package subversion version 1.6.16-alt0.M50P.1

April 18, 2011 Gleb Fotengauer-Malinovskiy 1.6.16-alt0.M50P.1 - Backport to p5 branch fixes CVE-2011-0715...

[SECURITY] Fedora 13 Update: loggerhead-1.18.1-1.fc13

Loggerhead is a WSGI app that provides a web interface to the Bazaar version control system. It can be used to navigate a branch history, view who changed lines in a file, look at patches, and perform searches...