SEC Consult SA-20130417-2 :: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server

SEC Consult Vulnerability Lab Security Advisory 20130417-2 ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter Sites Satellite Server former FatWire Satellite Serv...

Oracle WebCenter Sites Satellite Server - HTTP Header Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter Sites Satellite Server former FatWire Satellite Server vulnerab...

Oracle WebCenter Sites Satellite Server - HTTP Header Injection

Exploit for windows platform in category web applications Vendor description: ------------------- FatWire Satellite Server is a predecessor product of Oracle WebCenter Sites Satellite Server. "Oracle WebCenter Sites Satellite Server enables organizations to deliver segmented, targeted, and...

Oracle WebCenter Sites Satellite Server - HTTP Header Injection

Oracle WebCenter Sites Satellite Server - HTTP Header Injection SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter...

Oracle WebCenter / Fatwire Header Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter Sites Satellite Server former FatWire Satellite Server vulnerab...

Microsoft DNS Server Validation Spoofing (MS09-008) - High Confidence (CVE-2009-0234)

A weakness exists in Microsoft DNS server implementation. The problem is caused by improper handling of negative results for DNS ANY queries. Remote attackers could exploit this vulnerability by sending numerous ANY queries to the target server, followed by malicious responses to the same server...

[Ghost Phisher] GUI suite for phishing and penetration attacks

Ghost Phisher is a Wireless and Ethernet security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library, the program is able to emulate access points and deploy various internal networking servers for networking, penetration testing and...

Cautious Optimism over Google DNSSEC Deployment

Google’s announcement that its Google Public DNS resolution service now supports DNSSEC is being applauded, but experts caution that despite Google’s high profile, this only puts a slight dent in a larger issue. “I think it’s great that Google is getting involved and supporting validation for...

Design/Logic Flaw

Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users with a valid certificate and private key to read arbitrary catalogs or poison the master's cache via unspecified vectors...

Nmap NSE 6.01: dns-random-txid

Checks a DNS server for the predictable-TXID DNS recursion vulnerability. Predictable TXID values can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying txidtest.dns-oarc.net see https://www.dns- oarc.net/oarc/services/txidtest. Be aware that a...

Nmap NSE 6.01: dns-random-srcport

Checks a DNS server for the predictable-port recursion vulnerability. Predictable source ports can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying porttest.dns-oarc.net see https://www.dns- oarc.net/oarc/services/porttest. Be aware that any...

Authentication flaw

The Location Bandwidth Manager LBM Intracluster-communication feature in Cisco Unified Communications Manager CUCM 9.x before 9.11 does not require authentication from the remote LBM Hub node, which allows remote attackers to conduct cache-poisoning attacks against transaction records, and cause ...

CVE-2013-1134

The Location Bandwidth Manager LBM Intracluster-communication feature in Cisco Unified Communications Manager CUCM 9.x before 9.11 does not require authentication from the remote LBM Hub node, which allows remote attackers to conduct cache-poisoning attacks against transaction records, and cause ...

CVE-2013-1134

CVE-2013-1134 affects Cisco Unified Communications Manager (CUCM) 9.x prior to 9.1(1) where the Location Bandwidth Manager (LBM) intracluster communication does not require authentication from the remote LBM Hub node. This allows remote, unauthenticated attackers to poison LBM transaction records...

[zANTI] The Power of Backtrack on your Android

Android Network Toolkit also known as zANTI is the most comprehensive and refined pentest tool for android by Zimperium. Zimperium is founded by white hat hacker Itzhack ‘Zuk’ Avraham and also have Kevin Mitnick on there team! They also had recently held the Pentester’s WorldCup. zAnti still come...

RHEL 5 : Red Hat Network Satellite server IBM Java Runtime (RHSA-2011:0880)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0880 advisory. - TLS: MITM attacks via session renegotiation CVE-2009-3555 - krb5: null pointer dereference in GSS-API library leads to DoS...

Fedora 18 : ndjbdns-1.05.5-1.fc18 (2012-20923)

This fixes two of the cache poisoning issue in the DNS resolver - dnscache. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 16 : ndjbdns-1.05.5-1.fc16 (2012-20959)

This fixes two of the cache poisoning issue in the DNS resolver - dnscache. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 17 : ndjbdns-1.05.5-1.fc17 (2012-20967)

This fixes two of the cache poisoning issue in the DNS resolver - dnscache. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Slackware Advisory SSA:2008-205-01 dnsmasq

The remote host is missing an update as announced via advisory SSA:2008-205-01. OpenVAS Vulnerability Test $Id: esoftslkssa200820501.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...