135 matches found
Ubuntu 14.04 LTS : OpenJDK 7 regression (USN-3275-3)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3275-3 advisory. USN-3275-2 fixed vulnerabilities in OpenJDK 7. Unfortunately, the update introduced a regression when handling TLS handshakes. This update fixes the problem. We...
USN-3275-3: OpenJDK 7 regression
USN-3275-2 fixed vulnerabilities in OpenJDK 7. Unfortunately, the update introduced a regression when handling TLS handshakes. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenJDK improperly re-used cached NTLM connections in...
Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-3275-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3275-2 advisory. USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Tenable has extracted the preceding...
USN-3275-2 openjdk-7 vulnerabilities
USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Original advisory details: It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java applicati...
Ubuntu 16.04 LTS : OpenJDK 8 vulnerabilities (USN-3275-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3275-1 advisory. It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java...
OpenJDK: newline injection in the SMTP client (Networking, 8171533)
A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...
OpenJDK: newline injection in the SMTP client (Networking, 8171533)
A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...
Medium: java-1.8.0-openjdk
Issue Overview: Improper re-use of NTLM authenticated connections Networking, 8163520: It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could...
Updated java-1.8.0-openjdk packages fix security vulnerability
An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges CVE-2017-3511. It was found that the JAXP component of...
Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20170421)
Security Fixes : - An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges. CVE-2017-3511 - It was found that the...
OpenJDK: newline injection in the SMTP client (Networking, 8171533)
A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...
CVE-2017-3544
A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...
The Ghost vulnerability the GHOST remote using the EXP-bug warning-the black bar safety net
This article demonstrates one of the Ghost vulnerability the GHOST of EXP, this EXP is Metasploit a module. This Metasploit module can be remote exploit CVE-2 0 1 5-0 2 3 5 out of glibc library gethostbyname function heap overflow vulnerability vulnerability, the goal is to run the Exim mail...
Exim GHOST (glibc gethostbyname) Buffer Overflow Exploit
Exploit for linux platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Exim GHOST glibc gethostbyname Buffer Overflow', 'Description' = %q This modu...
Horde IMP 2.2.x/3.2.x/4.0.x Email Attachments HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15730/info Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...
i.Scribe SMTP Client <= 2.00b (wscanf) Remote Format String PoC
No description provided by source. ?php //I dont have c lol /=++++++++++++=--= 0-- -- i.Scribe smtp client v 1.88 to 2.00 beta Format String wscanf bug p0c vendor : Memecode Software grTs;SiD.psycho A.Luja 27.11.08 --++++++++++++++++++++--- 00- NOTE!!! you must enabled extension=phpsockets.dll in...
Hastymail2 Webmail 1.1 RC2 Cross Site Scripting
!/usr/bin/python ''' Exploit Title: Hastymail2 Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.hastymail.org Software Link: http://sourceforge.net/projects/hastymail/files/latest/download Version: 1.1 RC2 Gr33Tz: @aviadgolan , @benhayak,...
Plaintext injection in STARTTLS (multiple implementations)
This is a writeup about a flaw that I found recently, and that existed in multiple implementations of SMTP Simple Mail Transfer Protocol over TLS Transport Layer Security including my Postfix open source mailserver. I give an overview of the problem and its impact, how to find out if a server is...
i.Scribe SMTP Client <= 2.00b (wscanf) Remote Format String PoC
No description provided by source. ?php //I dont have c lol /=++++++++++++=--= 0-- -- i.Scribe smtp client v 1.88 to 2.00 beta Format String wscanf bug p0c vendor : Memecode Software grTs;SiD.psycho A.Luja 27.11.08 --++++++++++++++++++++--- 00- NOTE!!! you must enabled extension=phpsockets.dll in...
i.Scribe SMTP Client <= 2.00b (wscanf) Remote Format String PoC
Exploit for unknown platform in category dos / poc =============================================================== i.Scribe SMTP Client //Alfons Luja 0day.today 2018-04-02...