Fedora Update for dropbear FEDORA-2013-18593

Check for the Version of dropbear OpenVAS Vulnerability Test Fedora Update for dropbear FEDORA-2013-18593 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 18 Update: dropbear-2013.59-1.fc18

Dropbear is a relatively small SSH server and client. Dropbear is particularly useful for "embedded"-type Linux or other Unix systems, such as wireless routers...

Sun SPARC Enterprise T5120 and T5220 Default Configuration Root Command Execution

The remote Sun SPARC Enterprise Server has been mistakenly shipped with factory settings in the pre-installed Solaris 10 image which configures the remote SSH server insecurely. As a result, local or remote users may leverage these misconfigurations to execute arbitrary commands with the privileg...

PT-2013-4898

Name of the Vulnerable Software and Affected Versions PuTTY versions prior to 0.63 Description A buffer overflow issue exists due to improper handling of an invalid DSA signature during computation of a modular inverse. This can cause a division by zero, triggering the overflow by the bignum...

ZPanel 10.0.0.2 Remote Command Execution Vulnerability

ZPanel version 10.0.0.2 suffers from a remote root command execution vulnerability. One of our expert team members email protected who is assigned to do the security audit of ZPanel code has found the follwoing security vulnerability with ZPanel 10.0.0.2 which will allow anyone to escalate the ro...

ZPanel 10.0.0.2 Remote Command Execution

One of our expert team members [email protected] who is assigned to do the security audit of ZPanel code has found the follwoing security vulnerability with ZPanel 10.0.0.2 which will allow anyone to escalate the root accress and access the server by anyone. The security audit states the...

dropbear -- exposure of sensitive information, DoS

The Dropbear project reports: A weakness and a vulnerability have been reported in Dropbear SSH Server, which can be exploited by malicious people to disclose certain sensitive information and cause a DoS...

Cross site request forgery (csrf)

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...

CVE-2013-0713

CVE-2013-0713 affects Wind River VxWorks 6.5–6.9 IPSSH (SSH server). A crafted pty request can cause SSH access to be unavailable until next reboot; authenticated users may trigger this DoS. Public details confirm affected versions and the root cause (pty handling). Mitigation: apply Wind River p...

PT-2013-2550

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.5 through 6.9 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon outage, by sending a crafted packet. Recommendations For versions 6.5 through 6.9, consider...

PT-2013-2551

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.5 through 6.9 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon outage, by sending a crafted pty request. Recommendations For versions 6.5 through 6.9,...

VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability

Overview The SSH server IPSSH implementation in VxWorks contains a denial-of-service DoS vulnerability. The SSH server IPSSH implementation in VxWorks contains a denial-of-service DoS vulnerability due to an issue in the processing authentication requests. Hisashi Kojima and Masahiro Nakada of...

JVN#52492830: VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability

The SSH server IPSSH implementation in VxWorks contains a denial-of-service vulnerability due to an issue in processing pty requests. Impact Receiving a specially crafted pty request packet may cause SSH access to be unavailable until the next reboot. Solution Apply a patch Apply the appropriate...

JVN#20671901: VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability

The SSH server IPSSH implementation in VxWorks contains a denial-of-service DoS vulnerability due to an issue in the processing authentication requests. Impact Recieiving a specially crafted packet for a public key authentication request may cause the server to hang and SSH access to be unavailab...

JVN#45545972: VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability

The SSH server IPSSH implementation in VxWorks contains a denial-of-service DoS vulnerability due to an issue in processing authentication requests. Impact SSH access may become unavailable until the next reboot as a result of processing an authentication request. Solution Apply a patch Apply the...

JVN#01611135: VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability

The SSH server IPSSH implementation in VxWorks contains a denial-of-service DoS vulnerability due to an issue in the processing directly after the SSH connection is established. Impact SSH access may become unavailable until the next reboot when receiving a specially crafted packet after a SSH...

Nmap NSE 6.01: ssh-hostkey

Shows SSH hostkeys. Shows the target SSH server's key fingerprint and with high enough verbosity level the public key itself. It records the discovered host keys in 'nmap.registry' for use by other scripts. Output can be controlled with the 'sshhostkey' script argument. The script also includes a...

DEBIAN-CVE-2013-0220

The 1 sssautofscmdgetautomntent and 2 sssautofscmdgetautomntbyname function in responder/autofs/autofssrvcmd.c and the 3 sshcmdparserequest function in responder/ssh/sshsrvcmd.c in System Security Services Daemon SSSD before 1.9.4 allow remote attackers to cause a denial of service out-of-bounds...

Tectia SSH Server Authentication Bypass

The version of Tectia SSH Server running on the remote host is affected by an authentication bypass vulnerability. A remote, unauthenticated attacker can bypass authentication by sending a specially crafted request, allowing the attacker to authenticate as root. The software is only vulnerable wh...

Remote 0day Exploit for Tectia SSH Server released

Hacker @kingcope discovered critical vulnerability in Tectia SSH Server. Exploit working on SSH-2.0-6.1.9.95 SSH Tectia Server Latest available version from www.tectia.com that allow attacker to bypass Authentication remotely. Description : An attacker in the possession of a valid username of an...