[SECURITY] [DSA 2993-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2993-1 [email protected] http://www.debian.org/security/ Peter Palfrader July 31, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2993-1 (tor - security update)

Several issues have been discovered in Tor, a connection-based low-latency anonymous communication system, resulting in information leaks. Relay-early cells could be used by colluding relays on the network to tag user circuits and so deploy traffic confirmation attacks CVE-2014-5117 . The updated...

DSA-2993-1 tor - security update

Bulletin has no description...

DEBIAN-CVE-2014-5117

Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAYEARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAYEARLY cells as a means of communicating...

CVE-2014-5117

Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAYEARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAYEARLY cells as a means of communicating...

UBUNTU-CVE-2014-5117

Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAYEARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAYEARLY cells as a means of communicating...

PT-2014-1709

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.4.23 Tor versions 0.2.5 prior to 0.2.5.6-alpha Description The issue makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAY EARLY cells as a means of...

Updated pidgin packages fix CVE-2014-3775

Updated pidgin packages fix security vulnerability: It was discovered that libgadu incorrectly handled certain messages from file relay servers. A malicious remote server or a man in the middle could use this issue to cause applications using libgadu to crash, resulting in a denial of service, or...

QwikMail 0.3 HELO Command Buffer Overflow Vulnerability

No description provided by source. source: www.securityfocus.com/bid/11989/info QwikMail qwik-smtpd is reported prone to a remotely exploitable buffer overflow vulnerability. The issue is due to insufficient bounds checking of client-supplied SMTP HELO request data. This issue could theoretically...

Cobalt Raq3 PopRelayD Arbitrary SMTP Relay Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2986/info poprelayd is a script that parses /var/log/maillog for valid pop logins, and based upon the login of a client, allows the person logged into the pop3 service to also send email from the ip address they're...

Mambo Site Server 4.0.14 contact.php Unauthorized Mail Relay

No description provided by source. source: http://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous...

MIRC 2.x/3.x/4.x/5.x Nick Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4027/info mIRC is a popular Internet Relay Chat client whichs runs of Microsoft Windows 9x/ME/NT/2000/XP operating systems. A remote exploitable buffer overflow condition has been discovered in mIRC. This issue is due to...

Microsoft Windows SMB Relay Code Execution

No description provided by source. $Id: smbrelay.rb 10404 2010-09-21 00:13:30Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

joomla component ozio gallery 2 - Multiple Vulnerabilities

No description provided by source. !-- Exploit Title: Joomla Component Ozio Gallery 2 Multiple Vulnerabilities Date: 28 May 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/photos-a-images/photo-flash-gallery/4883 Version: 2.4 Tested on: PHP5, MySQL5 -- h2Ozio Gallery 2/h2...

Lotus Domino 4.6.1/4.6.4 Notes SMTPA MTA Mail Relay Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/487/info Lotus Notes SMTP MTA is susceptible to being used as a mail relay for SPAM or other unsolicited email. Connecting to the mail server tcp25 and issuing a 'mail from' command with as the data may allow an...

CacheFlow CacheOS 4.1.10016 HTTP HOST Proxy Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8584/info Malicious HTTP HOST header field can be used on CacheOS to tunnel arbitrary TCP connections through a HTTP request. It has been reported that CacheFlow CacheOS may allow the misuse of the HOST header value. This...

cPanel 5/6,Formail-Clone E-Mail Restriction Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7758/info It has been reported that cPanel is prone to an issue where a remote attacker may bypass cPanel Formail-clone local domain checks and have untrusted e-mail delivered in the context of the vulnerable host. This...

Working Resources BadBlue 1.7.x/2.x Unauthorized Proxy Relay Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11030/info BadBlue is prone to a vulnerability that may let the application be abused as a proxy. This vulnerability presents itself due to the 'Pass Thru' function allowing the server to be used as a proxy. This could be...

HiFriend 'cgi-bin/hifriend.pl' Open Email Relay Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30320/info HiFriend is prone to an open-email-relay vulnerability. An attacker could exploit this issue by constructing a script that would send unsolicited bulk email to an unrestricted amount of email addresses with a...

Joomla! Spam Mail Relay Vulnerability

No description provided by source. Exploit Title: Joomla! Spam Mail Relay Date: 11 Jan 2011 Author: Jeff Channell Software Link: http://www.joomla.org/ Versions: 1.5.22, 1.6.0 Joomla! 1.5.22 & 1.6.0 both allow spam email to be relayed to unsuspecting victims via the core commailto component. Test...