FreeBSD -- Multiple vulnerabilities of ntp

Problem Description: Multiple vulnerabilities have been discovered in the NTP suite: CVE-2016-9311: Trap crash, Reported by Matthew Van Gundy of Cisco ASIG. CVE-2016-9310: Mode 6 unauthenticated trap information disclosure and DDoS vector. Reported by Matthew Van Gundy of Cisco ASIG. CVE-2016-742...

PT-2017-10048

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to set or unset traps via a crafted control mode packet, which can lead to a denial of service caused by a NULL pointer dereference when the trap service has been...

PT-2017-10049

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference when the trap service is enabled. This can be achieved by sending specially crafte...

CVE-2016-9311

A flaw was found in the way ntpd implemented the trap service. A remote attacker could send a specially crafted packet to cause a null pointer dereference that will crash ntpd, resulting in a denial of service. Mitigation Use "restrict default noquery ..." in your ntp.conf file. Only allow mode 6...

PT-2016-7323

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to cause a denial of service reject broadcast mode packets via a crafted broadcast mode packet. It is also caused by a NULL pointer dereference when trap service has...

PT-2016-7326

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. This is due to a regression of a previous issue. Multiple vulnerabilities could...

PT-2016-7324

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to cause a denial of service, potentially by exploiting the poll interval in a broadcast packet or through a NULL pointer dereference when the trap service is enabled...

Network Time Protocol Trap Crash Denial of Service Vulnerability

Summary An exploitable denial of service vulnerability exists in the trap functionality of ntpd. If an ntpd instance is configured to send traps, a specially crafted network packet can be used to cause a null pointer dereference resulting in a denial of service. This vulnerability can be triggere...

Microsoft Edge - eval Type Confusion Vulnerability

Exploit for windows platform in category dos / poc var p = new Proxyeval, ; p"alert"e""; 0day.today 2018-02-16...

Microsoft Edge - eval Type Confusion

Microsoft Edge - eval Type Confusion var p = new Proxyeval, ; p"alert"e"";...

Opmantek NMIS XSS Vulnerability

Opmantek NMIS is prone to a cross-site scripting vulnerability via SNMP Trap messages. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Skylanders Trap Team Quiz - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Skylanders Trap Team Quiz published at the 'play' market has multiple vulnerabilities...

Trap Cubes 2 - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Trap Cubes 2 published at the 'play' market has multiple vulnerabilities...

Trap Cubes - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Trap Cubes published at the 'play' market has multiple vulnerabilities...

Trap Drum Pad Machine - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Trap Drum Pad Machine published at the 'play' market has multiple vulnerabilities...

FreeBSD 远程拒绝服务攻击漏洞

0x01 漏洞复现 此漏洞是由于FreeBSD在处理ipv6数据包时，某函数对于数据的检验不严格，导致若传入的ipv6结构体某成员函数为NULL时，在后续函数调用中会触发assert，导致freebsd进入异常处理机制，内核崩溃引发系统重启，下面对此漏洞进行详细分析。 首先对于漏洞环境的搭建我不讲解了，在我的微信公众号上发了一篇文章专门讲解FreeBSD环境的搭建，包括内核调试，vmtools安装等等，环境搭建好之后，通过执行poc.py，发现程序重启，重启过程中，/var/crash下会生成崩溃信息。...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via 1 an SNMP OID object, 2 an SNMP trap message, 3 the View Names field, 4 the Group Names field, 5 the Flow Monitor Credentials field, 6 the Flow...

CVE-2015-6005: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via 1 an SNMP OID object, 2 an SNMP trap message, 3 the View Names field, 4 the Group Names field, 5 the Flow Monitor Credentials field, 6 the Flow...

net-snmp: snmptrapd crash when handling an SNMP trap containing a ifMtu with a NULL type

A denial of service flaw was found in the way snmptrapd handled certain SNMP traps when started with the "-OQ" option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected, it would cause snmptrapd to crash...

[SECURITY] Fedora 23 Update: icecat-38.3.0-10.fc23

GNUZilla Icecat is a fully-free fork of Mozilla Firefox. Four extensions are included to this version of IceCat: LibreJS 6.0.10.20150620 GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap. SpyBlock 2.6.9.0 Blocks privacy trackers while i...