CVE-2012-6052

Wireshark 1.8.x before 1.8.4 contains multiple vulnerabilities fixed in the 1.8.4 update. The CVE-2012-6052 hostname disclosure arises from reading pcap-ng files, while additional CVEs (CVE-2012-6053 to CVE-2012-6062) describe DoS/infinite-loop or crash conditions in several dissectors (USB, sFlo...

CVE-2012-6059

CVE-2012-6059 affects the Wireshark ISAKMP dissector. The vulnerability arises from the dissect_isakmp function using an incorrect data structure to determine IKEv2 decryption parameters, allowing remote attackers to crash the application via a malformed packet. Affected versions include Wireshar...

CVE-2012-5600

...

CVE-2012-4609

CVE-2012-4609 affects RSA NetWitness Informer web interface prior to version 2.0.5.6. The issue is a clickjacking vulnerability in the web interface that could be exploited via unspecified vectors to trick an authenticated user into executing actions. The ESA-2012-052 advisory and Red Hat/Securit...

CVE-2012-6053

CVE-2012-6053 affects Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4. The USB dissector relies on a length field to compute an offset; a zero value for that field can trigger an infinite loop DoS. Connected advisories also document related DoS in other dissectors and confirm the patch in Wi...

SOL14054 - CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929

Vulnerability Recommended Actions To eliminate this vulnerability, perform one of the following actions: Upgrade to a software version that is listed in the Versions known to be Not Vulnerable column of the table. Upgrade your client browser to a non-vulnerable version. Supplemental Information...

Ektron 8.02 - XSLT Transform Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/filedropper' class Metasploit3...

RHEL 5 : kernel (RHSA-2012:1540)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1540 advisory. - kernel: rds-ping cause kernel panic CVE-2012-2372 - kernel: net: slab corruption due to improper synchronization around inet-opt...

Ektron 8.02 XSLT Transform Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/filedropper' class Metasploit3...

EMC NetWorker nsrd Stack Buffer Overflow (CVE-2012-2288)

A stack buffer overflow vulnerability has been reported in EMC NetWorker...

Ektron 8.02 XSLT Transform Remote Code Execution

This Metasploit module exploits a vulnerability in Ektron CMS 8.02 before SP5. The vulnerability exists due to the insecure usage of XslCompiledTransform, using a XSLT controlled by the user. The module has been tested successfully on Ektron CMS 8.02 over Windows 2003 SP2, which allows to execute...

Ubuntu 10.04 LTS : linux-ec2 vulnerability (USN-1653-1)

Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cause a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has...

Tectia SSH Server Authentication Bypass

The version of Tectia SSH Server running on the remote host is affected by an authentication bypass vulnerability. A remote, unauthenticated attacker can bypass authentication by sending a specially crafted request, allowing the attacker to authenticate as root. The software is only vulnerable wh...

CVE-2012-5357

creationtimestamp| type| source ---|---|--- 2012-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23155 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ektronxsltexec.rb 2025-02-06 03:13:40+00:00| seen|...

CVE-2012-6067

CVE-2012-6067 affects freeFTPd.exe bundled with freeFTPd up to version 1.0.11. The vulnerability allows a remote attacker to bypass authentication via a crafted SFTP session, demonstrated with an OpenSSH client using modified ssh.c and sshconnect2.c. The issue is documented as a high-severity, ne...

CVE-2012-5975

CVE-2012-5975 affects SSH Tectia Server on UNIX/Linux: versions 6.0.4–6.0.20, 6.1.0–6.1.12, 6.2.0–6.2.5, and 6.3.0–6.3.2 are vulnerable when old-style password authentication is enabled. A crafted session can bypass authentication by exploiting SSH2_USERAUTH_CHANGE REQUEST via a blank password, d...

CVE-2012-6066

CVE-2012-6066 affects freeSSHd up to version 1.2.6, where freeSSHd.exe allows remote attackers to bypass authentication via a crafted session, demonstrated with modified ssh.c/sshconnect2.c. Public references (e.g., Red Hat, CIRCL, MSF exploits) indicate an authentication bypass vector exploitabl...

puppet: Filebucket denial of service

Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to 1 cause a denial of service memory consumption via a REST request to a stream tha...

rubygem-actionpack: Unsafe query generation

actionpack/lib/actiondispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended...

Low: Red Hat Security Advisory: Red Hat Network Proxy server jabberd security update

An updated jabberd package that fixes one security issue is now available for Red Hat Network Proxy 5.5 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...