openssh security, bug fix, and enhancement update

4.3p2-36 - tiny change in chroot sftp capability into openssh-server solve ls speed problem 440240 4.3p2-35 - workaround to plaintext recovery attack against CBC ciphers CVE-2008-5161 502230 4.3p2-34 - disable protocol 1 in the FIPS mode 4.3p2-33 - fix scp hangup on exit 454812 - call integrity...

Zmanda Recovery Manager for MySQL socket-server.pl MYSQL_BINPATH Variable Command Execution

The remote service appears to be Zmanda Recovery Manager ZRM for MySQL's socket-server.pl. ZRM for MySQL offers a backup and recovery solution for MySQL, and the socket-server.pl component typically runs on a MySQL server out of xinetd to support remote operations. The installed version of...

OpenSSH: Plaintext Recovery Attack against CBC ciphers

Error handling in the SSH protocol in 1 SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1;...

CVE-2008-7128

The sslparseclientkeyexchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors...

CVE-2008-7128

The sslparseclientkeyexchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors...

Code injection

The sslparseclientkeyexchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors...

CVE-2008-7128

The CVE-2008-7128 entry concerns the ssl_parse_client_key_exchange function in XySSL prior to 0.9, which does not protect against certain Bleichenbacher-style chosen-ciphertext attacks. The vulnerability allows remote attackers to recover keys via unspecified vectors. Documented impact is partial...

CVE-2008-7128

The sslparseclientkeyexchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors...

Practical Advice For Cleaning Hacked Web Sites

From the HP Security Labs blog If Google detects that your website is hosting malware, it is pretty clear your site has been attacked. A frightening trend with SQL Injection attacks concerns how an attacker will insert links to javascript content used to serve malicious links that may try and...

Absolute Software Computrace LoJack for Laptops Detection

The remote host is running Computrace LoJack, a laptop theft-recovery device. Note that a flaw has been discovered in this product that might allow an attacker to execute arbitrary code on the remote host. There is no patch for this vulnerability yet. C Tenable Network Security, Inc. if NASLLEVEL...

Easily crack Win2008 password-ERD6. 0-vulnerability warning-the black bar safety net

Everyone knows ERD5. 0 On win2008 and Vista operating system not afford to do with, how to crack win2008 and vista? ERD6. 0 done this point, below we our to MDOP2008 as an example to introduce how to customize a picture of ERD6. 0 tools CD-ROM First, in win2008 insert MDOP2008 the installation...

phpWebThings <= 1.5.2 MD5 Hash recovery/file disclosure remote vulnerabilities-vulnerability warning-the black bar safety net

phpWebThings = 1.5.2 MD5 Hash recovery/file disclosure remote vulnerabilities Note: 1, regardless of the php. ini how to set this vulnerability are effective; 2, The wtconfig.php contains the mysql login Brief description: phpWebThings including one that allows an attacker to executeSQL...

HP Data Protector dpwinsup.dll内存泄漏漏洞

BUGTRAQ ID: 34955 CVECAN ID: CVE-2009-0714 HP Data Protector软件能够实现自动化的高性能备份与恢复，支持通过磁盘和磁带进行备份和恢复。 HP Data Protector使用私有协议与远程客户端通讯。如果远程客户端向Data Protector备份域服务器的dpwinsup.dll模块发送了特制报文，就可能泄露任意内存，导致运行在3817/TCP端口上的dpwingad进程崩溃。 ; Buggy code @dpwinsup module of dpwingad process ; running at 3817/TCP port...

CVE-2009-2158

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...

[waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...

Stack overflow

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file...

Stack overflow

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file...

CVE-2009-1640

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file...

CVE-2009-1639

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file...

CVE-2009-1640

CVE-2009-1640 affects Nucleus Data Recovery Kernel Recovery for Macintosh v4.04. The vulnerability is a stack-based buffer overflow in the AMHH file handling that can allow a user‑assisted attacker to execute arbitrary code. The NVD entry shows a high base score (9.3, CVSS2: AV:N/AC:M/Au:N/C:C/I:...