cyrus-imapd: STARTTLS plaintext command injection

The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command...

Wireshark 1.4.7 & Wireshark 1.2.17 Released

Wireshark 1.4.7 & Wireshark 1.2.17 Released Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education.This update fixes many bugs. Supports for the following protocols have been updated – BSSMAP, DMP, GSM SMS, LDSS, NCP,...

Mandriva Update for perl-IO-Socket-SSL MDVSA-2011:092 (perl-IO-Socket-SSL)

Check for the Version of perl-IO-Socket-SSL OpenVAS Vulnerability Test Mandriva Update for perl-IO-Socket-SSL MDVSA-2011:092 perl-IO-Socket-SSL Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for perl-IO-Socket-SSL MDVSA-2011:092 (perl-IO-Socket-SSL)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[ MDVSA-2011:092 ] perl-IO-Socket-SSL

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:092 http://www.mandriva.com/security/ Package : perl-IO-Socket-SSL Date : May 18, 2011 Affected: 2010.1 Problem Description: A vulnerability has been found and corrected in perl-IO-Socket-SSL: IO::Socket::SS...

kernel: drivers/scsi/mpt2sas: prevent heap overflows

drivers/scsi/mpt2sas/mpt2sasctl.c in the Linux kernel 2.6.38 and earlier does not validate 1 length and 2 offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service memory corruption, or obtain sensitive information from...

virtio-blk: heap buffer overflow caused by unaligned requests

Multiple heap-based buffer overflows in the virtio-blk driver hw/virtio-blk.c in qemu-kvm 0.14.0 allow local guest users to cause a denial of service guest crash and possibly gain privileges via a 1 write request to the virtioblkhandlewrite function or 2 read request to the virtioblkhandleread...

Mandriva Linux Security Advisory : perl-IO-Socket-SSL (MDVSA-2011:092)

A vulnerability has been found and corrected in perl-IO-Socket-SSL : IO::Socket::SSL Perl module 1.35, when verifymode is not VERIFYNONE, fails open to VERIFYNONE instead of throwing an error when a cafile/capath cannot be verified, which allows remote attackers to bypass intended certificate...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service source: https://www.securityfocus.com/bid/47858/info Novell eDirectory and Netware are prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause a system-wide denial-of-service. !/usr/bin/perl...

NSENSE-2011-002: Novell eDirectory/Netware LDAP-SSL daemon

nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor response: Patch CVE: None Credit: Knud /...

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service

source: https://www.securityfocus.com/bid/47858/info Novell eDirectory and Netware are prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause a system-wide denial-of-service. !/usr/bin/perl usage: ./novell.pl 10.0.0.1 0x41424344 use IO::Socket::SSL; $socket =...

Novell LDAP-SSL Daemon Denial Of Service

nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor response: Patch CVE: None Credit: Knud /...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Microsoft Vista TCP/IP堆缓冲区下溢漏洞

Windows Vista是微软下一代操作系统，以前叫做Longhorn（微软当初内部的代号）。作为微软最新操作系统，Windows Vista第一次在操作系统中引入“ Life Immersion”概念，即在系统中集成许多人性的因素，一切以人为本。使得操作系统尽最大可能贴近用户，了解用户的感受，从而方便用户。 Windows Vista 32位和64位系统发布的API中的Microsoft Device IO Control在实现上存在安全漏洞，攻击者可利用此漏洞造成缓冲区下溢破坏内核内存。 Microsoft Vista 厂商补丁： Microsoft ---------...

MPlayer (r33064 Lite) Buffer Overflow + ROP exploit

No description provided by source. !/usr/bin/perl Exploit Title: Mplayer BOF + ROP Exploit Date: 04\05\2011 Author: NateM based on original WinXP non ROP exploit by C4SS!0 and h1ch4m Software Link:...

MPlayer (r33064 Lite) Buffer Overflow + ROP exploit

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: Mplayer BOF + ROP Exploit Date: 04\05\2011 Author: NateM based on original WinXP non ROP exploit by C4SS!0 and h1ch4m Software Link:...

MPlayer r33064 Lite Buffer Overflow

!/usr/bin/perl Exploit Title: Mplayer BOF + ROP Exploit Date: 04\05\2011 Author: NateM based on original WinXP non ROP exploit by C4SS!0 and h1ch4m Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download Version: Lite 33064...

MPlayer (r33064 Lite) - Local Buffer Overflow (ROP)

!/usr/bin/perl Exploit Title: Mplayer BOF + ROP Exploit Date: 04\05\2011 Author: NateM based on original WinXP non ROP exploit by C4SS!0 and h1ch4m Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download Version: Lite 33064...

MPlayer Lite r33064 - '.m3u' Local Overflow (SEH)

!/usr/bin/perl +Exploit Title: Exploit Buffer Overflow MsplayerSEH +Date: 19\03\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download +Version: Lite 33064 +Tested On: WIN-XP SP3 +CVE: N/A...