Ubuntu 11.04 / 11.10 / 12.04 LTS : freeradius vulnerability (USN-1585-1)

Timo Warns discovered that FreeRADIUS incorrectly handled certain long timestamps in client certificates. A remote attacker could exploit this flaw and cause the FreeRADIUS server to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for...

USN-1585-1: FreeRADIUS vulnerability

Timo Warns discovered that FreeRADIUS incorrectly handled certain long timestamps in client certificates. A remote attacker could exploit this flaw and cause the FreeRADIUS server to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for...

CVE-2012-1535

creationtimestamp| type| source ---|---|--- 2012-08-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20624 2014-05-24 07:23:08+00:00| seen| MISP/53804616-c6a8-48ea-b511-dbf1950d210b 2018-05-29 15:50:33+00:00| seen|...

CVE-2009-1730

creationtimestamp| type| source ---|---|--- 2012-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20392 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/tftp/netdecisiontftp.rb 2018-05-29 15:50:33+00:00| seen...

CVE-2012-4177

creationtimestamp| type| source ---|---|--- 2012-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20321 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ubisoftuplaycmdexec.rb 2025-02-06 03:13:40+00:00...

CVE-2012-2626

creationtimestamp| type| source ---|---|--- 2012-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37549 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/scrutinizeradduser.rb 2025-02-06 03:13:40+00:00| see...

CVE-2012-2953

creationtimestamp| type| source ---|---|--- 2012-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20088 2012-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20113 2018-05-29 15:50:33+00:00| seen|...

CVE-2012-1723

creationtimestamp| type| source ---|---|--- 2012-07-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19717 2013-09-23 09:59:38+00:00| seen| MISP/523c662f-2958-4aaf-a65e-4005950d2109 2014-08-01 08:49:58+00:00| seen| MISP/53db4964-af90-4c15-8a3f-68beac1d4fa4 2018-05-29...

CVE-2012-3399

creationtimestamp| type| source ---|---|--- 2012-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19631 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/basilicdiffexec.rb 2025-02-06 03:13:40+00:00| seen|...

CVE-2012-0911

creationtimestamp| type| source ---|---|--- 2012-07-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19573 2012-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19630 2018-05-29 15:50:33+00:00| seen|...

CVE-2012-4356

creationtimestamp| type| source ---|---|--- 2012-06-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19409 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/scada/sielcowinlogfileaccess.rb 2025-02-06...

CVE-2012-0694

creationtimestamp| type| source ---|---|--- 2012-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19403 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/sugarcrmunserializeexec.rb 2019-10-29 23:26:25+00:00...

CVE-2012-0779

creationtimestamp| type| source ---|---|--- 2012-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19369 2014-05-17 11:51:26+00:00| seen| MISP/53774a97-be48-4d6f-8291-4066950d2109 2014-05-24 07:23:07+00:00| seen| MISP/53804616-c6a8-48ea-b511-dbf1950d210b 2018-05-29...

CVE-2012-2495

The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by...

CVE-2012-1875

creationtimestamp| type| source ---|---|--- 2012-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19141 2013-11-12 10:29:19+00:00| seen| MISP/52820098-69f4-4415-b737-4635950d2109 2014-05-24 07:23:08+00:00| seen| MISP/53804616-c6a8-48ea-b511-dbf1950d210b 2018-05-29...

CVE-2012-2122

creationtimestamp| type| source ---|---|--- 2012-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19092 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysqlauthbypasshashdump.rb 2025-01-04...

CVE-2012-0013

creationtimestamp| type| source ---|---|--- 2012-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19037 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms12005.rb 2025-02-06 03:13:40+00:00| seen|...

CVE-2012-1493

creationtimestamp| type| source ---|---|--- 2012-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19064 2012-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19091 2012-06-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19099 2018-05-29...

CVE-2012-3815

creationtimestamp| type| source ---|---|--- 2012-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19025 2012-06-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19409 2018-05-29 15:50:33+00:00| seen|...

CVE-2012-2915

creationtimestamp| type| source ---|---|--- 2012-06-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19006 2012-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19175 2018-05-29 15:50:33+00:00| seen|...