KarjaSoft Sami FTP Server Remote Buffer Overflow Vulnerability

Sami FTP Server is an FTP service program. Sami FTP Server version 2.0.2 suffers from an overflow vulnerability in the handling of usernames and passwords supplied by users connecting to the server, which allows users to send overly long parameters to the buffer via a number of commands, which ca...

SUSE SLES12 Security Update : libstorage (SUSE-SU-2016:2355-1)

This update for libstorage fixes the following issues : - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE-SU-2016:2355-1 Security update for libstorage

This update for libstorage fixes the following issues: - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746...

SUSE SLED12 / SLES12 Security Update : libstorage (SUSE-SU-2016:2189-1)

This update for libstorage fixes the following issues : - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE-SU-2016:2189-1 Security update for libstorage

This update for libstorage fixes the following issues: - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746...

CVE-2016-0733

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username...

Vulnerabilities in the Grub2 operating system loaders, which allow attackers to obtain confidential information or cause service failures

The multiple vulnerabilities of the Grub2 operating system’s loader are caused by a loss of precision for an integer. Exploiting these vulnerabilities allows a local attacker to bypass authentication procedures, obtain confidential information, or cause a service failure disk corruption by using...

SUSE-SU-2015:2387-1 Security update for grub2

Fix buffer overflows when reading username and password. bsc956631, CVE-2015-8370 - Check MS-DOS header to find PE file header. bsc954126 - Use dirname for copying Xen kernel and initrd to esp. bsc955493 - Fix reading password by grub2-mkpasswd-pbdk2 without controlling tty. bsc954519 - Add luks,...

Cisco Unified MeetingPlace Web Page Source Code Remote Password Disclosure (CSCuu33050)

According to its self-reported version number, the Cisco Unified MeetingPlace application hosted on the remote web server is potentially affected by an information disclosure vulnerability due to improper handling of passwords. An authenticated, remote attacker can obtain plaintext passwords by...

GLSA-201507-09 : PyPAM: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201507-09 PyPAM: Arbitrary code execution PyPAM does not handle passwords correctly if there is NULL byte in the string. Impact : A remote attacker could possibly execute arbitrary code or cause a Denial of Service condition...

SUSE-SU-2015:0884-1 Security update for spice

The remote desktop software SPICE was updated to address one security issue. The following vulnerabilitiy was fixed: A stack-based buffer overflow in the password handling code allowed remote attackers to cause a denial of service crash via a long password in a SPICE ticket. bsc848279, CVE-2013-4...

KLA10503 Multiple vulnerabilities in IBM products

Multiple serious vulnerabilities have been found in IBM products. Below is a complete list of vulnerabilities 1. Improper WAR applications support in IBM Bluemix can be exploited remotely via unspecified vectors related to Java overlay feature; 2. Improper API access restrictions in IBM API...

CVE-2014-9034

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service CPU consumption via a long password that is improperly handled during hashing, a similar issue to CVE-2014-9016...

CVE-2014-9034

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service CPU consumption via a long password that is improperly handled during hashing, a similar issue to CVE-2014-9016...

CVE-2014-9034

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service CPU consumption via a long password that is improperly handled during hashing, a similar issue to CVE-2014-9016...

Cyberoam UTM Multiiple Vulnerabilities

No description provided by source. SECURITY ADVISORY: cyberoam-utm-command-executaion Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background Cyberoam Unified Threat Management appliances offer assured security...

CVE-2013-3272

EMC Replication Manager RM before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack...

CVE-2013-3272

EMC Replication Manager RM before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack...

JBoss: CallerIdentityLoginModule retaining password from previous call if a null password is provided

The CallerIdentityLoginModule in JBoss Enterprise Application Platform EAP before 5.2.0, Web Platform EWP before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's...

CVE-2012-2124

CVE-2012-2124 affects SquirrelMail’s imap_general.php used in RHEL 4/5; improper handling of 8-bit password characters allows remote attackers to cause DoS by spamming IMAP login attempts, creating many preference files. Root cause: an incorrect fix for CVE-2010-2813. Mitigation/fix references ap...