GLSA-201310-02 : isync: Man-in-the-Middle attack

The remote host is affected by the vulnerability described in GLSA-201310-02 isync: Man-in-the-Middle attack isync does not properly verify the servers hostname against the CN field in the SSL certificate. Impact : A remote server could perform man-in-the-middle attacks to disclose passwords or...

PT-2013-1255

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.1.11 through 5.0.4 strongSwan versions prior to 5.1.0 Description The issue affects the strongSwan package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected...

PT-2013-1253 · Gentoo Linux · Strongswan

Name of the Vulnerable Software and Affected Versions: strongswan versions prior to 5.1.0 Description: The issue affects the strongswan package in Gentoo Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. Exploitation of the...

PT-2013-1136

Name of the Vulnerable Software and Affected Versions libXcursor versions 1.1.13 and earlier xorg-server versions prior to 1.14.3-r2 libXext versions 1.3.2 and earlier libX11 versions 1.6.0 and earlier libXt versions 1.1.4 and earlier libXfixes versions 5.0.1 and earlier libXinerama versions 1.1....

PT-2013-1126

Name of the Vulnerable Software and Affected Versions libX11 versions 1.6.0 libX11-devel versions 1.6.0 libXext versions 1.3.2 libXext-devel versions 1.3.2 libXfixes versions 5.0.1 libXfixes-devel versions 5.0.1 libXinerama versions 1.1.3 libXinerama-devel versions 1.1.3 libXi versions 1.7.2...

PT-2013-1198

Name of the Vulnerable Software and Affected Versions mit-krb5 versions prior to 1.11.4 Description The issue affects the mit-krb5 package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can be done remotely...

PT-2013-1250

Name of the Vulnerable Software and Affected Versions sudo versions prior to 1.8.6p7 sudo versions 1.8.x prior to 1.8.6p6 sudo versions prior to 1.7.10p5 Description The issue affects the sudo package in Gentoo Linux, potentially compromising confidentiality, integrity, and availability of...

PT-2013-1249

Name of the Vulnerable Software and Affected Versions sudo versions 1.3.5 through 1.7.10 sudo versions 1.8.0 through 1.8.5 sudo versions prior to 1.8.6 p7 Description The issue affects the sudo package in Gentoo Linux, potentially compromising confidentiality, integrity, and availability of...

PT-2013-1232

Name of the Vulnerable Software and Affected Versions Puppet versions prior to 2.7.23 Puppet versions 0.25.0 through 2.6.18 Puppet versions 2.7.x through 2.7.20 Puppet versions 3.1.x through 3.1.0 Puppet Enterprise versions prior to 1.2.7 Puppet Enterprise versions 2.7.x through 2.7.1 Description...

Oracle Java SE CVE-2013-1488 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current process. Technologies Affected Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager Utility...

Oracle Java SE CVE-2013-0431 Remote Java Runtime Environment Vulnerability

Description Oracle Java SE is prone to a remote vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'JMX' sub-component. This vulnerability affects the following supported versions: 7 Update 11 and prior Note: This issue wa...

GLSA-201301-04 : dhcpcd: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201301-04 dhcpcd: Arbitrary code execution A vulnerability has been discovered in dhcpcd. Please review the CVE identifier referenced below for details. Impact : The vulnerability might allow an attacker to execute arbitrary code ...

GLSA-201301-06 : ISC DHCP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201301-06 ISC DHCP: Denial of Service Multiple vulnerabilities have been discovered in ISC DHCP. Please review the CVE identifiers referenced below for details. Impact : The vulnerabilities might allow remote attackers to execute...

Adobe Acrobat and Reader CVE-2013-0604 Remote Heap Based Buffer Overflow Vulnerability

Description Adobe Acrobat and Reader are prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions. Note...

PT-2013-1218

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.9.0 and earlier Description The issue affects the libxml2 package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. It can be exploited remotely...

lighttpd 1.4.31 - Denial of Service (PoC)

lighttpd 1.4.31 - Denial of Service PoC !/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested...

lighttpd 1.4.31 - Denial of Service (PoC)

!/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested on: Debian Linux, Gentoo Linux, Arch...

GLSA-201210-01 : w3m: SSL spoofing vulnerability

The remote host is affected by the vulnerability described in GLSA-201210-01 w3m: SSL spoofing vulnerability A SSL spoofing vulnerability has been discovered in w3m. Please review the CVE identifier referenced below for details. Impact : A remote attacker might employ a specially crafted...

GLSA-201210-03 : rdesktop: Directory Traversal

The remote host is affected by the vulnerability described in GLSA-201210-03 rdesktop: Directory Traversal A vulnerability has been discovered in rdesktop. Please review the CVE identifier referenced below for details. Impact : Remote RDP servers may be able to read or overwrite arbitrary files v...

GLSA-201209-09 : Atheme IRC Services: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201209-09 Atheme IRC Services: Denial of Service The myuserdelete function in account.c does not properly remove CertFP entries when deleting user accounts. Impact : A remote authenticated attacker may be able to cause a Denial of...