DEBIAN-CVE-2015-5300

The panicgate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds...

FreeRADIUS Denial of Service Vulnerability (CNVD-2017-16975)

FreeRADIUS is a set of software that implements the RADIUS protocol from the FreeRADIUS Server project. The software is mainly used for account authentication management, bookkeeping management and Internet account management, etc. and contains a Radius server, a client library for BSD protocol...

DEBIAN-CVE-2017-10983

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

CVE-2017-10983

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

CVE-2017-10983

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

Change Password Option in StoreFront Not Shown, Available Only for Admins

Change password option in StoreFront not shown for non-domain admins but is there for domain admins...

PT-2017-11660

Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 2.x through 2.2.9 FreeRADIUS versions 3.x through 3.0.14 Description The issue allows for a denial of service due to a read overflow when decoding option 63 in DHCP. Recommendations For FreeRADIUS versions 2.x through 2.2.9...

CVE-2017-10983: Improper Restriction of Operations within the Bounds of a Memory Buffer

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

UBUNTU-CVE-2017-10983

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

Legal Robot: Missing link to TOTP manual enroll option

While going live with additional 2FA options, a security researcher discovered that during TOTP enrollment, only a barcode was displayed to users, no TOTP manual enroll option with a printed base32 secret was provided for non-smartphone users...

PT-2017-3271

Name of the Vulnerable Software and Affected Versions Vim version 8.0 Description The issue is related to the use of memory after it has been freed, which can be exploited by an attacker to cause a denial of service. This can be achieved by creating a specially crafted source file using the -S...

SUSE SLES11 Security Update : freeradius-server (SUSE-SU-2017:1777-1)

This update for freeradius-server fixes the following issues : - CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. bnc1041445 - CVE-2015-4680: Add a configuration option to allow checking of all intermediate certificates for revocations. bnc935573 The...

CVE-2017-10807

JabberD 2.x aka jabberd2 before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled...

Security fix for the ALT Linux 9 package openvpn version June

June 21, 2017 Nikolay A. Fetisov 2.4.3-alt1 - New version - Security fixes: + CVE-2017-7522 Post-authentication --x509-track remote DoS + CVE-2017-7521 Post-authentication remote-triggerable memory leaks + CVE-2017-7521 Potential post-authentication remote code execution on servers that use the...

Debian DLA-986-1 : zookeeper security update

It was discovered that Zookeeper, a service for maintaining configuration information, didn't restrict access to the computationally expensive wchp/wchc commands which could result in denial of service by elevated CPU consumption. This update disables those two commands by default. The new...

(0Day) Schneider Electric U.motion Builder message_simple_html reboot Parameter Denial of Service Vulnerability

This vulnerability allows remote attackers to deny service on vulnerable installations of Schneider Electric U.motion Builder. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of messagesimplehtml.php, which is exposed on the web service. Th...

CVE-2016-7824

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...

CVE-2016-7824

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...

CVE-2016-7824: Improper Access Control

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...

PT-2017-9375

Name of the Vulnerable Software and Affected Versions Buffalo NC01WH devices version 1.0.0.8 and earlier Description The issue allows authenticated attackers to bypass access restrictions and enable the debug option. Recommendations For Buffalo NC01WH devices version 1.0.0.8 and earlier, update t...