Ubuntu Update for libpam-opie vulnerability USN-955-2

Ubuntu Update for Linux kernel vulnerabilities USN-955-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9552.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for libpam-opie vulnerability USN-955-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu Update for opie vulnerability USN-955-1

Ubuntu Update for Linux kernel vulnerabilities USN-955-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9551.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for opie vulnerability USN-955-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-955-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-955-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 9.04 / 9.10 / 10.04 LTS : libpam-opie vulnerability (USN-955-2)

USN-955-1 fixed vulnerabilities in OPIE. This update provides rebuilt libpam-opie packages against the updated libopie library. Maksymilian Arciemowicz and Adam Zabrocki discovered that OPIE incorrectly handled long usernames. A remote attacker could exploit this with a crafted username and make...

ftp-libopie NSE Script

Checks if an FTPd is prone to CVE-2010-1938 OPIE off-by-one stack overflow, a vulnerability discovered by Maksymilian Arciemowicz and Adam "pi3" Zabrocki. See the advisory at . Be advised that, if launched against a vulnerable host, this script will crash the FTPd. Script Arguments vulns.short,...

USN-955-2: libpam-opie vulnerability

USN-955-1 fixed vulnerabilities in OPIE. This update provides rebuilt libpam-opie packages against the updated libopie library. Original advisory details: Maksymilian Arciemowicz and Adam Zabrocki discovered that OPIE incorrectly handled long usernames. A remote attacker could exploit this with a...

USN-955-1: OPIE vulnerability

Maksymilian Arciemowicz and Adam Zabrocki discovered that OPIE incorrectly handled long usernames. A remote attacker could exploit this with a crafted username and make applications linked against libopie crash, leading to a denial of service...

FreeBSD Security Advisory (FreeBSD-SA-10:05.opie.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:05.opie.asc ADV FreeBSD-SA-10:05.opie.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:05.opie.asc Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...

FreeBSD Security Advisory (FreeBSD-SA-10:05.opie.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:05.opie.asc SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Preemptive Protection against Multiple Vendors OPIE Off-by-one Stack Buffer Overflow Vulnerability

A stack buffer overflow vulnerability has been reported in OPIE. OPIE, "One time Passwords In Everything", is a login and password package installed on the server and the client, which makes untrusted networks safer against password-sniffing packet analysis software. OPIE is shipped with DragonFl...

Check the System if Opie-Server and Opie-Client are installed

Check the System if Opie-Server and Opie-Client are installed. Read /etc/pam.d/opie, List Files und /etc/pam.d/ with -include opie- entry, Read ChallengeResponseAuthentication entry in /etc/ssh/sshdconfig SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a...

Check the System if Opie-Server and Opie-Client installed

Check the System if Opie-Server and Opie-Client installed. Read /etc/pam.d/opie, List Files und /etc/pam.d/ with -include opie- entry, Read ChallengeResponseAuthentication entry in /etc/ssh/sshdconfig OpenVAS Vulnerability Test $Id: GSHBSSHOpie.nasl 7076 2017-09-07 11:53:47Z teissa $ Check the...

FreeBSD OPIE实现__opiereadrec()函数单字节栈溢出漏洞

BUGTRAQ ID: 40403 CVE ID: CVE-2010-1938 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD所使用的OPIE认证系统中readrec.c文件的opiereadrec函数存在单字节栈溢出漏洞，在启用了栈保护的情况下，攻击者可以远程导致使用OPIE的服务进程崩溃。以下是有漏洞的代码段： "/src/contrib/opie/opie.h" / Maximum length of a principal read: user name / define OPIEPRINCIPALMAX 32...

CVE-2010-1938

Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long username, as...

CVE-2010-1938

The CVE-2010-1938 issue affects OPIE’s library (libopie) used by OPIE up to version 2.4.1-test1, on FreeBSD 6.4–8.1-PRERELEASE and other platforms. The vulnerability is an off-by-one error in __opiereadrec/readrec.c that can be triggered by a long USER command to FTP servers linked against libopi...

CVE-2010-1938

Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long username, as...

FreeBSD Security Advisory FreeBSD-SA-10:05.opie

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:05.opie Security Advisory The FreeBSD Project Topic: OPIE off-by-one stack overflow Category: contrib Module: contribopie Announced: 2010-05-27 Credits:...

FreeBSD OPIE library off-by-one overflow

Off-by-one overflow during authentication...

FreeBSD 8.0 ftpd Off-By-One Proof Of Concept

libopie readrec off-by one FreeBSD ftpd remote PoC Authors: - Maksymilian Arciemowicz - Adam 'pi3' Zabrocki http://securityreason.com/achievementsecurityalert/87 http://site.pi3.com.pl/adv/libopie-adv.txt http://blog.pi3.com.pl/?p=111 Date: - Dis.: 04.05.2010 - Pub.: 27.05.2010 CVE: CVE-2010-1938...