DEBIAN-CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

PT-2010-5399

Name of the Vulnerable Software and Affected Versions Pandora FMS versions prior to 3.1.1 Description The issue concerns an incomplete blacklist vulnerability in the safe url extraclean function within the ajax.php file. This vulnerability allows remote attackers to execute arbitrary PHP code by...

Debian DSA-2129-1 : krb5 - checksum verification weakness

A vulnerability has been found in krb5, the MIT implementation of Kerberos. MIT krb5 clients incorrectly accept unkeyed checksums in the SAM-2 preauthentication challenge: an unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of...

Re: D-Link DIR-300 authentication bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Polish D-Link branch confirmed the bug and produced relevant patched firmware: DIR-300: ftp://ftp.dlink.pl/dir/dir-300/driversoftware/DIR-300fwrevA1-05B09allen20101130.zip...

DSA-2129-1 krb5 - checksum verification weakness

Bulletin has no description...

Mandriva Linux Security Advisory : krb5 (MDVSA-2010:245)

A vulnerability was discovered and corrected in krb5 : An unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of response sent to the KDC. Under some circumstances, this can negate the incremental security benefit of using a...

krb5: incorrect acceptance of certain checksums (MITKRB5-SA-2010-007)

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

PT-2010-1099

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 aka krb5 versions 1.3.x through 1.8.3 MIT Kerberos 5 aka krb5 versions prior to 1.9.2 Description The issue is related to the improper determination of checksum acceptability, which could allow remote attackers to modify...

krb5 -- multiple checksum handling vulnerabilities

The MIT Kerberos team reports: MIT krb5 clients incorrectly accept an unkeyed checksums in the SAM-2 preauthentication challenge. An unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of response sent to the KDC. Under some...

Mandriva Update for commoncpp MDVA-2010:225 (commoncpp)

Check for the Version of commoncpp OpenVAS Vulnerability Test Mandriva Update for commoncpp MDVA-2010:225 commoncpp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Google Launches Phishing Alert Service

In late September, Google announced Google Safe Browsing Alerts for Network Administrators -- a tool that enables Autonomous System AS owners to receive notifications for malicious content found on their networks. For example, ISPs that host thousands of sites but don't directly control what's...

MDVA-2010:225 : commoncpp

This updates fixes two major bugs: - applog subcription/unsubscription needed to get a thread safe usage of applog were buggy and not thread safe themselves. - disabling slog usage form printout level error was not respected. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

McAfee Remediation Client - ActiveX Control Buffer Overflow (Metasploit)

$Id: mcafeeherculesdeletesnapshot.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Safe Returner 1.27.5 Commandline Vulnerability

Exploit for windows platform in category local exploits ============================================== Safe Returner 1.27.5 Commandline Vulnerability ============================================== Exploit Title : Commandline vulnerability Date : 27 Oct 2010 Author : STRELiTZIA Software : Safe...

Google ввел новую функцию по борьбе с интернет-мошенниками

Корпорация Google сегодня запустила новую функцию для своего поискового сервиса, которая позволяет активизировать борьбу с мошенническими сайтами. Функция будет полезна как обычным пользователям, так и системным администраторам, поскольку первые видят предупреждение об опасности, а вторые —...

Joomla Community Builder Enhenced Component LFI/RCE Vulnerability

Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...