[ MDVSA-2012:175 ] libssh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:175 http://www.mandriva.com/security/ Package : libssh Date : November 29, 2012 Affected: 2011. Problem Description: Multiple double free, buffer overflow, invalid free and improper overflow checks...

CVE-2012-5975

creationtimestamp| type| source ---|---|--- 2012-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23082 2012-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23156 2018-05-29 15:50:33+00:00| seen|...

CVE-2012-6066

creationtimestamp| type| source ---|---|--- 2012-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23079 2012-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23080 2013-01-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24133 2018-05-29...

CVE-2012-5613

creationtimestamp| type| source ---|---|--- 2012-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23077 2012-12-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23179 2015-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35777 2018-05-29...

[USN-1643-1] Perl vulnerabilities

========================================================================== Ubuntu Security Notice USN-1643-1 November 30, 2012 perl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 11.10 : linux vulnerabilities (USN-1648-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Java Applet JAX-WS Remote Code Execution (CVE-2012-5076)

A security bypass vulnerability has been reported in Java Runtime Environment JRE...

[SECURITY] [DSA 2579-1] apache2 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2579-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 30, 2012 http://www.debian.org/security/faq -...

Symantec Web Gateway pbcontrol.php Command Injection (CVE-2012-2953)

A remote command execution vulnerability has been reported in Symantec Web Gateway...

Ubuntu 12.10 : linux vulnerabilities (USN-1646-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-1644-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

ABB Robot Communications Runtime Buffer Overflow

Overview ICS-CERT received a report from ABB and the Zero Day Initiative ZDI concerning a buffer overflow vulnerability in the Robot Communication Runtime software used to communicate with IRC5, IRC5C, and IRCP robot controllers. This vulnerability was reported to ZDI by independent security...

Android Stock Browser Iframe DOS

This module exploits a vulnerability in the native browser that comes with Android 4.0.3. If successful, the browser will crash after viewing the webpage. Module Options msf use auxiliary/dos/android/android/stockbrowseriframe msf undefinedstockbrowseriframe show actions ...actions... msf...

Oracle MySQL for Microsoft Windows MOF Execution

This module takes advantage of a file privilege misconfiguration problem specifically against Windows MySQL servers due to the use of a .mof file. This may result in arbitrary code execution under the context of SYSTEM. This module requires a valid MySQL account on the target machine. Module...

CVE-2012-4560

Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via unspecified vectors...

CVE-2012-4477

Unspecified vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to bypass access restrictions via unknown attack vectors...

CVE-2012-4571

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

CVE-2012-6063

Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...

CVE-2012-4472

The CVE-2012-4472 issue affects the Drupal Drag & Drop Gallery module (6.x-1.5 and earlier). The vulnerability resides in upload.php, where unrestricted file uploads allow an attacker to upload a PHP-executable file (with an executable extension followed by a safe extension) and then access it vi...

CVE-2012-4562

CVE-2012-4562 : The provided documents confirm a vulnerability in libssh involving multiple buffer overflow, double-free, and integer overflow issues. The root cause is memory-management/overflow flaws in libssh up to version 0.5.2, allowing a remote attacker to potentially crash the service or e...