Accellion File Transfer Appliance MPIPE2 - Command Execution (Metasploit)

$Id: accellionftampipe2.rb 11935 2011-03-11 17:37:23Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities

R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities February 7, 2011 -- Vulnerability Details: The Accellion File Transfer Appliance, prior to version FTA80562, suffers from a number of security flaws that can lead to a remote root compromise. 1. Message Routing Daemon Default...

Accellion File Transfer Appliance Multiple Vulnerabilities

R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities February 7, 2011 -- Vulnerability Details: The Accellion File Transfer Appliance, prior to version FTA80562, suffers from a number of security flaws that can lead to a remote root compromise. 1. Message Routing Daemon Default...

Sony Sues PlayStation 3 Jailbreakers

Sony has filed a lawsuit against a group of hackers who were able to bypass the DRM protections in the company’s PlayStation 3, compromised the root key and later published tools allowing others to follow in their footsteps and play pirated software on the console. On Tuesday, Sony filed suit in...

RSA Key Manager SQL injection Vulnerability ( CVE-2010-1904 )

Product: RSA Key Manager Vendor: EMC/RSA Vulnerable Component: Key Manager Client Vulnerable Component Version: 1.5.x Vulnerability Type: SQL injection Vendor Contact Date: 4/20/2010 Status: Vendor does not want to fix the vulnerability. Vulnerability Details: RSA Key Manager Client software uses...

CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

Design/Logic Flaw

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

CVE-2010-1149

CVE-2010-1149 affects udisks prior to 1.0.1. The issue is in probers/udisks-dm-export.c which exports UDISKS_DM_TARGETS_PARAMS information to udev even for crypt UDISKS_DM_TARGETS_TYPE, allowing local users to discover encryption keys by (1) running a particular udevadm command or (2) reading a f...

Ubuntu Update for openssl-blacklist update USN-612-9

Ubuntu Update for Linux kernel vulnerabilities USN-612-9 OpenVAS Vulnerability Test $Id: gbubuntuUSN6129.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openssl-blacklist update USN-612-9 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-612-7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-612-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-612-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for openvpn regression USN-612-10

Ubuntu Update for Linux kernel vulnerabilities USN-612-10 OpenVAS Vulnerability Test $Id: gbubuntuUSN61210.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openvpn regression USN-612-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for openvpn vulnerability USN-612-3

Ubuntu Update for Linux kernel vulnerabilities USN-612-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN6123.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openvpn vulnerability USN-612-3 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-10)

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...

Ubuntu 6.06 LTS : openssh update (USN-612-7)

USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak keys generated on systems tha...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh update (USN-612-5)

Matt Zimmerman discovered that entries in /.ssh/authorizedkeys with options such as 'no-port-forwarding' or forced commands were ignored by the new ssh-vulnkey tool introduced in OpenSSH see USN-612-2. This could cause some compromised keys not to be listed in ssh-vulnkey's output. This update al...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn vulnerability (USN-612-3)

A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledg...