Mandriva Linux Security Advisory : perl-IO-Socket-SSL (MDVSA-2011:092)

A vulnerability has been found and corrected in perl-IO-Socket-SSL : IO::Socket::SSL Perl module 1.35, when verifymode is not VERIFYNONE, fails open to VERIFYNONE instead of throwing an error when a cafile/capath cannot be verified, which allows remote attackers to bypass intended certificate...

NSENSE-2011-002: Novell eDirectory/Netware LDAP-SSL daemon

nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor response: Patch CVE: None Credit: Knud /...

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service source: https://www.securityfocus.com/bid/47858/info Novell eDirectory and Netware are prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause a system-wide denial-of-service. !/usr/bin/perl...

Novell LDAP-SSL Daemon Denial Of Service

nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor response: Patch CVE: None Credit: Knud /...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service

source: https://www.securityfocus.com/bid/47858/info Novell eDirectory and Netware are prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause a system-wide denial-of-service. !/usr/bin/perl usage: ./novell.pl 10.0.0.1 0x41424344 use IO::Socket::SSL; $socket =...

Gentoo Security Advisory GLSA 201101-06 (IO::Socket::SSL)

The remote host is missing updates announced in advisory GLSA 201101-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201101-06 (IO::Socket::SSL)

The remote host is missing updates announced in advisory GLSA 201101-06. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Novell Iprint LPD Remote Code Execution

!/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=21&Itemid=21 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '10.102.3.79'; my $port = 515; my $proto = 'tcp'; my $sockType = SOCKSTREAM; my $timeout = 1; my %opt; my $optstring =...

Novell Iprint LPD Remote Code Execution Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=21&Itemid=21 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '10.102.3.79'; my $port = 515; my $proto = 'tcp'; my $sockType =...

Novell Iprint - LPD Remote Code Execution

Novell Iprint - LPD Remote Code Execution !/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=21&Itemid=21 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '10.102.3.79'; my $port = 515; my $proto = 'tcp'; my $sockType = SOCKSTREAM; my...

ActFax Server (LPDLPR) 4.25 Build 0221 (2010-02-11) - Remote Buffer Overflow

ActFax Server LPDLPR 4.25 Build 0221 2010-02-11 - Remote Buffer Overflow !/usr/bin/perl Exploit Title: ActFax Server LPD/LPR Remote Buffer Overflow Exploit Date: Feb 15, 2011 Author: chap0 Software Link: http://www.actfax.com/download/actfaxsetupen.exe Version: Version 4.25, Build 0221 2010-02-11...

ActFax Server (LPD/LPR) 4.25 Build 0221 (2010-02-11) - Remote Buffer Overflow

!/usr/bin/perl Exploit Title: ActFax Server LPD/LPR Remote Buffer Overflow Exploit Date: Feb 15, 2011 Author: chap0 Software Link: http://www.actfax.com/download/actfaxsetupen.exe Version: Version 4.25, Build 0221 2010-02-11 Tested on: Windows XP SP3 en Big thanks to Sud0 - and an extra greetz to...

Unreal Tournament - Remote Buffer Overflow (SEH)

Unreal Tournament - Remote Buffer Overflow SEH Unreal Tournament Remote Buffer Overflow Exploit SEH Windows Discovered by: Luigi Auriemma http://aluigi.altervista.org/adv/unsecure-adv.txt Coded By: Fulcrum 08/02/2011 Patch: http://www.unrealadmin.org/forums/showthread.php?t=15616 Vulnerable: all...

Unreal Tournament Buffer Overflow

Unreal Tournament Remote Buffer Overflow Exploit SEH Windows Discovered by: Luigi Auriemma http://aluigi.altervista.org/adv/unsecure-adv.txt Coded By: Fulcrum 08/02/2011 Patch: http://www.unrealadmin.org/forums/showthread.php?t=15616 Vulnerable: all ut99 servers without a patch. Tested on: win7...

Air Contacts Lite - HTTP Packet Denial of Service

source: https://www.securityfocus.com/bid/46827/info Air Contacts Lite is prone a denial-of-service vulnerability. Successful exploits may allow an attacker to crash the affected application, resulting in a denial-of-service condition. !/usr/bin/perl use IO::Socket; if @ARGV new Proto = "tcp",...

ProFTPD mod_sftp Integer Overflow DoS PoC

Exploit for linux platform in category dos / poc ProFTPD modsftp Integer Overflow by Kingcope reference: http://www.castaglia.org/proftpd/modules/modsftp.html Exploit Title: ProFTPD modsftp Integer Overflow Date: 7 February 2011 Author: Kingcope Software Link:...

ProFTPD mod_sftp Integer Overflow

ProFTPD modsftp Integer Overflow by Kingcope reference: http://www.castaglia.org/proftpd/modules/modsftp.html Exploit Title: ProFTPD modsftp Integer Overflow Date: 7 February 2011 Author: Kingcope Software Link: http://www.castaglia.org/proftpd/modules/modsftp.html Tested on: Centos 5.5 Program...

ProFTPd - mod_sftp Integer Overflow Denial of Service (PoC)

ProFTPd - modsftp Integer Overflow Denial of Service PoC ProFTPD modsftp Integer Overflow by Kingcope reference: http://www.castaglia.org/proftpd/modules/modsftp.html Exploit Title: ProFTPD modsftp Integer Overflow Date: 7 February 2011 Author: Kingcope Software Link:...

ProFTPd - 'mod_sftp' Integer Overflow Denial of Service (PoC)

ProFTPD modsftp Integer Overflow by Kingcope reference: http://www.castaglia.org/proftpd/modules/modsftp.html Exploit Title: ProFTPD modsftp Integer Overflow Date: 7 February 2011 Author: Kingcope Software Link: http://www.castaglia.org/proftpd/modules/modsftp.html Tested on: Centos 5.5 Program...