NTP ntpd Denial of Service Vulnerability

NTP Network Time Protocol is a protocol used by clients to synchronize the date and time with a time server. A denial of service vulnerability exists in NTP ntpd due to inconsistencies in packets received by NTP4 installations using symmetric key authentication. An attacker is allowed to exploit...

PT-2015-4179

Name of the Vulnerable Software and Affected Versions NTP daemon ntpd affected versions not specified Description The issue is related to a denial of service in the Network Time Protocol NTP Project NTP daemon. It is caused by an error when using symmetric key authentication. An attacker could...

PT-2015-5445

Name of the Vulnerable Software and Affected Versions NTP versions 3.x through 4.2.8p1 NTP version 4.2.8p2 is not affected, as it is the fixed version, so all versions prior to 4.2.8p2 are vulnerable. Description The issue allows man-in-the-middle attackers to cause a denial of service,...

SSH Username Enumeration

This module uses a malformed packet or timing attack to enumerate users on an OpenSSH server. The default action sends a malformed corrupted SSHMSGUSERAUTHREQUEST packet using public key authentication must be enabled to enumerate users. On some versions of OpenSSH under some configurations,...

Juniper Netscreen 5.0 VPN Username Enumeration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14595/info The Juniper Netscreen VPN implementation will identify valid usernames in IKE aggressive mode, when pre-shared key authentication is used. This allows for attackers to obtain a list of valid VPN users. With a...

FTP OnConnect 1.4.11 iOS - Multiple Vulnerabilities

No description provided by source. Title: ====== FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities Date: ===== 2013-08-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1041 VL-ID: ===== 1041 Common Vulnerability Scoring System:...

Debian: Security Advisory (DSA-2456-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2456-1 (dropbear - use after free)

Danny Fullerton discovered a use-after-free in the Dropbear SSH daemon, resulting in potential execution of arbitrary code. Exploitation is limited to users, who have been authenticated through public key authentication and for which command restrictions are in place. OpenVAS Vulnerability Test...

Android exposed the new vulnerability: hackers can use a key authentication to steal user passwords-vulnerability warning-the black bar safety net

Close paragraph of time, the hackers in the Android system found a large number of vulnerabilities, including the legitimate Android software into malicious software, the FBI can remotely monitor the Android phone microphone and so on. Now, PCWorld also exposed with the Android a new...

CVE-2013-0714

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...

Cross site request forgery (csrf)

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...

CVE-2013-0714

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...

CVE-2013-0714

CVE-2013-0714 affects Wind River VxWorks 6.5–6.9 IPSSH (SSH server). A crafted public-key authentication request can cause the SSH server to hang and make SSH access unavailable until the next reboot; the vulnerability may also enable arbitrary code execution on the server. The issue is reported ...

PT-2013-2552

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.5 through 6.9 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a daemon hang, via a crafted public-key authentication request in the IPSSH server...

CVE-2013-0714: Improper Input Validation

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...

FreeSSHd 1.2.6 Authentication Bypass

require 'msf/core' require 'tempfile' class Metasploit3 "Freesshd Authentication Bypass", 'Description' = %q This module exploits a vulnerability found in FreeSSHd MSFLICENSE, 'Author' = 'Aris', Vulnerability discovery and Exploit 'kcope', 2012 Exploit 'Daniele Martini ' Metasploit module ,...

OpenSSH 6.0p1 Backdoor Patch 1.2 Vulnerability 0day

This patch is for openssh-6.0p1 source which combines a known openssh backdoor and Sebastian Krahmer's openssh.reverse capabilities. Telnet to target openssh server and issue udcgamaimagic string for getting reverse openssh connection. $id: udc-hackssh-v3bajaulaut-v1, 2012/10/28 05:00:50 slash...

RedHat Update for krb5 RHSA-2011:0356-01

Check for the Version of krb5 OpenVAS Vulnerability Test RedHat Update for krb5 RHSA-2011:0356-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

DEBIAN-CVE-2012-0920

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels...

CVE-2012-0920

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels...