269 matches found
Global actually has 2 0 0 million IoT devices there is also 1 2 years ago OpenSSH“hardcore”vulnerability is! - Vulnerability warning-the black bar safety net
IoT, in the early years, this also slightly strange term, and now has gone to the all aspects of our lives, such as the cloud monitor, the network of industrial control devices, the satellite antenna device, and so on. However, IoT security is also have troubling one problem, most of the safety...
Apache Karaf Default Credentials Command Execution
This module exploits a default misconfiguration flaw on Apache Karaf versions 2.x-4.x. The 'karaf' user has a known default password, which can be used to login to the SSH service, and execute operating system commands from remote. Module Options msf use...
“Broken shell vulnerability”of self-diagnosis and repair-vulnerability warning-the black bar safety net
”The broken shell vulnerability”of self-diagnosis and repair now is hot of the Bash vulnerability, also known as the”broken shell vulnerability”that can lead to a remote attacker on the affected system to execute arbitrary code, it can affect multiple System Services: Web, ssh, gitlab, DHCP, and ...
Cisco Catalyst 4000/5000/6000 6.1 SSH Protocol Mismatch Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/2117/info Software versions 6.11, 6.11a and 6.11b for Catalyst 4000, 5000, and 6000 devices that support SSH and 3 DES encryption contain a vulnerability that may allow an attacker to cause a denial of service. If a...
Cerberus FTP Server SFTP Username Enumeration
This module uses a dictionary to brute force valid usernames from Cerberus FTP server via SFTP. This issue affects all versions of the software older than 6.0.9.0 or 7.0.0.2 and is caused by a discrepancy in the way the SSH service handles failed logins for valid and invalid users. This issue was...
CVE-2013-3594
The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service device reset or possibly execute arbitrary code by sending many packets to TCP port 22...
Code injection
The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service device reset or possibly execute arbitrary code by sending many packets to TCP port 22...
[SECURITY] [DSA 2826-1] denyhosts security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2826-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 22, 2013 http://www.debian.org/security/faq -...
Debian DSA-2826-1 : denyhosts - remote denial of ssh service
Helmut Grohne discovered that denyhosts, a tool preventing SSH brute-force attacks, could be used to perform remote denial of service against the SSH daemon. Incorrectly specified regular expressions used to detect brute-force attacks in authentication logs could be exploited by a malicious user ...
[SECURITY] [DSA 2826-1] denyhosts security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2826-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 22, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2826-1 (denyhosts - Remote denial of ssh service)
Helmut Grohne discovered that denyhosts, a tool preventing SSH brute-force attacks, could be used to perform remote denial of service against the SSH daemon. Incorrectly specified regular expressions used to detect brute force attacks in authentication logs could be exploited by a malicious user ...
Sysax Multi Server SSH Username Buffer Overflow
A stack buffer overflow vulnerability has been reported in Sysax Multi Server SSH Service...
Symantec Messaging Gateway 9.5/9.5.1 SSH Default Password Security Bypass Vulnerability
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
OpenSSH < 2.9.9p2 echo simulation Information Disclosure
According to its banner, the remote host is running a version of OpenSSH earlier than 2.9.9p2. It therefore can potentially disclose the fact that the 'echo simulation' countermeasure is in use because the application sends an additional echo packet after the password and carriage return is...
SSH password weakness
Added: 01/05/2011 CVE: CVE-1999-0502 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...
Xlight FTP Server Multiple Directory Traversal Vulnerabilities
Xlight FTP Server is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user- supplied input. Exploiting these issues may allow an attacker to obtain sensitive information which could aid in further attacks. Xlight FTP Server 3.5.5 is vulnerable; other...
Code injection
The SSH service on the TANDBERG Video Communication Server VCS before X5.1 uses a fixed DSA key, which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets...
iPhone Worm Was Simple, Yet Effective, Analysis Shows
The iKee worm that was infecting jailbroken iPhones last month was a simple, yet effective, piece of software that shows how easy it might be for an attacker to create a fairly large, functioning botnet comprising mobile devices, an analysis of the worm shows. Researchers at SRI International’s...
iPhone Worm Circulating in the Wild
A simple, yet effective, worm is now circulating on some jailbroken iPhones, changing settings on the phones and terminating some services. The worm, which was discovered Sunday, doesn’t appear to be too malicious, but is an indicator of what might lie ahead for owners of iPhones and other...