papers

Papers A handy collection of my public papers, all in one place. Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db publication at https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance - Multiple Input Validation Vulnerabilities Exploit-db publication at https://www.exploit-db.com/exploits/30290/ Exploit-db paper at : https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf Git repo at...

CVE-2007-3831

CVE-2007-3831 PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 Exploit-db publication at https://www.exploit-db.com/exploits/30290/ Exploit-db paper at :...

EUVD-2007-3815

Malware in sbrugna...

EUVD-2010-0185

Malware in sbrugna...

EUVD-2009-1239

Malware in sbrugna...

EUVD-2009-2538

Malware in sbrugna...

EUVD-2007-3814

Malware in sbrugna...

EUVD-2010-0186

Malware in sbrugna...

EUVD-2010-0184

Malware in sbrugna...

EUVD-2010-0187

Malware in sbrugna...

EUVD-2007-2682

Malware in sbrugna...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2019-1547, CVE-2019-1563)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2019-1547, CVE-2019-1563 Vulnerability Details CVE-ID: CVE-2019-1547 Description: OpenSSL could allow a local authenticated attacker to obtain sensitive information, caused by the ability to...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2019-1559)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2019-1559 Vulnerability Details CVE-ID: CVE-2019-1559 Description: OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerabilities (CVE-2018-20796, CVE-2019-9169)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2018-20796, CVE-2019-9169 Vulnerability Details CVE-ID: CVE-2018-20796 Description: GNU C Library aka glibc or libc6 is vulnerable to a denial of service, caused by an uncontrolled recursion in t...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2018-0732)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2018-0732 Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by the sending of a very large prime value to the client by a malicious serv...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2018-0737)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2018-0737 Vulnerability Details CVEID: CVE-2018-0737 DESCRIPTION: OpenSSL could allow a local attacker to obtain sensitive information, caused by a cache-timing side channel attack in the RSA Key...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerabilities (CVE-2018-19591)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2018-19591 Vulnerability Details CVEID: CVE-2018-19591 DESCRIPTION: Glibc is vulnerable to a denial of service, caused by the failure to close descriptors by ifnametoindex. By invoking a call to...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2018-0734)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2018-0734 Vulnerability Details CVEID: CVE-2018-0734 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing side channel attack in the DSA signatur...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerabilities (CVE-2018-6485)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2018-6485 Vulnerability Details CVEID: CVE-2018-6485 DESCRIPTION: GNU C Library is vulnerable to a denial of service, caused by an integer overflow in the implementation of the posixmemalign in...