CVE-2010-3170

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL serve...

firefox/nss: doesn't handle IP-based wildcards in X509 certificates safely

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL serve...

SSL wildcard certificate matching IP addresses — Mozilla

Security researcher Richard Moore reported that when an SSL certificate was created with a common name containing a wildcard followed by a partial IP address a valid SSL connection could be established with a server whose IP address matched the wildcard range by browsing directly to the IP addres...

CVE-2010-2363

The IPv6 Unicast Reverse Path Forwarding RPF implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address...

Design/Logic Flaw

The IPv6 Unicast Reverse Path Forwarding RPF implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address...

CVE-2010-2363

The IPv6 Unicast Reverse Path Forwarding RPF implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address...

Multiple browsers certificates validation weakness

Wildmasks in certificates issued to IP address are enabled...

wp-10-0001: Multiple Browser Wildcard Cerficate Validation Weakness

Westpoint Security Advisory --------------------------- Title: Multiple Browser Wildcard Cerficate Validation Weakness Risk Rating: Low Author: Richard Moore [email protected] Test Cases: Simon Ward [email protected] Date: 14 July 2010 Advisory ID: wp-10-0001 URL:...

Misconfigured SOCKS filtering

A private network can be reached through the SOCKS proxy. The reachable IP address of this SOCKS proxy is public, and its 'external' address is private. Using the SOCKS proxy, an attacker may connect to internal machines that run on RFC1918 addresses, which are expected to be unreachable from the...

Microsoft Windows - IcmpSendEcho2Ex Interrupting Denial of Service

/ Microsoft Windows DoS IcmpSendEcho2Ex interrupting Author: l3D Sites: http://nullbyte.org.il, http://forums.hacking.org.il IRC: irc://irc.nix.co.il/security Email: [email protected] Tested on Windows 7 Microsoft Windows operating system is prone to a local DoS by interrupting the function...

CVE-2010-2242

CVE-2010-2242 relates to Red Hat/libvirt 0.2.0–0.8.2, where libvirt creates iptables rules with improper mappings of privileged source ports. This could allow a guest OS user to bypass host access restrictions by manipulating IP address and source-port values, as demonstrated by an NFS operation....

tomcat: information disclosure in authentication headers

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires 1 BASIC or 2 DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the rep...

ISC-DHCPD Denial of Service

Exploit for windows platform in category dos / poc =========================== ISC-DHCPD Denial of Service =========================== ! /usr/bin/env python Exploit title: isc-dhcpd DoS Date: 03/07/2010 Author: sid Software Link: https://www.isc.org/software/dhcp Version: 4.0.x, 4.1.x, 4.2.x CVE:...

ISC DHCPD - Denial of Service

ISC DHCPD - Denial of Service ! /usr/bin/env python Exploit title: isc-dhcpd DoS Date: 03/07/2010 Author: sid Software Link: https://www.isc.org/software/dhcp Version: 4.0.x, 4.1.x, 4.2.x CVE: cve-2010-2156 ps: is possible make a bruteforce on subnet ip address to find a correct value. import sys...

ISC DHCPD - Denial of Service

!/usr/bin/env python Exploit title: isc-dhcpd DoS Date: 03/07/2010 Author: sid Software Link: https://www.isc.org/software/dhcp Version: 4.0.x, 4.1.x, 4.2.x CVE: cve-2010-2156 ps: is possible make a bruteforce on subnet ip address to find a correct value. import sys import string if lensys.argv i...

File Sharing Wizard Version 1.5.0 (SEH) Exploit

No description provided by source. !/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print " Greetz to:...

File Sharing Wizard 1.5.0 - Remote Overflow (SEH)

File Sharing Wizard 1.5.0 - Remote Overflow SEH !/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print...

Input validation

The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size...

Joomla Camp26 Visitor Data 1.1 Code Execution

Joomla Module Camp26 Visitor Data 1.1 Remote code Execution ============================================================ - Discovered by : Chip D3 Bi0s - Email : [email protected] - Date : 2010-04-28 - Severity : 9/10 CVSS scored ------------------------------- Module Camp26 Visitor Data For...

[ MDVSA-2010:093 ] mysql

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:093 http://www.mandriva.com/security/ Package : mysql Date : May 7, 2010 Affected: 2009.1, 2010.0 Problem Description: A vulnerability was discovered in mysql which would permit mysql users without any kind ...