GLSA-200609-18 : Opera: RSA signature forgery

The remote host is affected by the vulnerability described in GLSA-200609-18 Opera: RSA signature forgery Opera makes use of OpenSSL, which fails to correctly verify PKCS 1 v1.5 RSA signatures signed by a key with exponent 3. Some CAs in Opera's list of trusted signers are using root certificates...

Opera: RSA signature forgery

Background Opera is a multi-platform web browser. Description Opera makes use of OpenSSL, which fails to correctly verify PKCS 1 v1.5 RSA signatures signed by a key with exponent 3. Some CAs in Opera's list of trusted signers are using root certificates with exponent 3. Impact An attacker could...

PT-2006-5617 · Mclinkscounter · Mclinkscounter

Name of the Vulnerable Software and Affected Versions: mcLinksCounter version 1.1 Description: The issue allows remote attackers to potentially execute arbitrary PHP code via a URL in the langfile parameter in several PHP files, including "login.php", "stats.php", "detail.php", and "erase.php"...

opera -- RSA Signature Forgery

Opera reports: A specially crafted digital certificate can bypass Opera's certificate signature verification. Forged certificates can contain any false information the forger chooses, and Opera will still present it as valid. Opera will not present any warning dialogs in this case, and the securi...

bind9 -- Denial of Service in named(8)

Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...

[SA21710] BlackICE PC Protection "NtOpenSection()" Denial of Service

TITLE: BlackICE PC Protection "NtOpenSection" Denial of Service SECUNIA ADVISORY ID: SA21710 VERIFY ADVISORY: http://secunia.com/advisories/21710/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system SOFTWARE: BlackICE PC Protection 3.x http://secunia.com/product/1702/ DESCRIPTION: David Matous...

HP-UX PHCO_34215 : HP-UX in Trusted mode, Local Denial of Service (DoS) (HPSBUX02141 SSRT51153 rev.1)

s700800 11.23 libpamunix cumulative patch : A potential security vulnerability has been identified in HP-UX running in Trusted Mode. The potential vulnerability could be exploited by a local authorized user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

HP-UX PHCO_34214 : HP-UX in Trusted mode, Local Denial of Service (DoS) (HPSBUX02141 SSRT51153 rev.1)

s700800 11.11 libpamunix cumulative patch : A potential security vulnerability has been identified in HP-UX running in Trusted Mode. The potential vulnerability could be exploited by a local authorized user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

HP-UX PHCO_34806 : HP-UX in Trusted mode, Local Denial of Service (DoS) (HPSBUX02141 SSRT51153 rev.1)

s700800 11.00 libpamunix cumulative patch : A potential security vulnerability has been identified in HP-UX running in Trusted Mode. The potential vulnerability could be exploited by a local authorized user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

CVE-2006-4187

Unspecified vulnerability in HP-UX B.11.00, B.11.11 and B.11.23, when running in trusted mode, allows local users to cause a denial of service via unspecified vectors...

[security bulletin] HPSBUX02141 SSRT51153 rev.1 - HP-UX in Trusted mode, Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00749123 Version: 1 HPSBUX02141 SSRT51153 rev.1 - HP-UX in Trusted mode, Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

CVE-2006-4187

HP-UX vulnerability CVE-2006-4187 affects HP-UX B.11.00, B.11.11 and B.11.23 when running in Trusted Mode, allowing a local authorized user to cause a Denial of Service via unspecified vectors. Related Nessus patches (PHCO_34214/34215/34806) address DoS in Trusted Mode with libpam_unix components...

CVE-2006-4187

Unspecified vulnerability in HP-UX B.11.00, B.11.11 and B.11.23, when running in trusted mode, allows local users to cause a denial of service via unspecified vectors...

HP-UX DoS

Support Tools Manager DoS, Trusted Mode DoS...

Microsoft IIS ASP Remote Code Execution Vulnerability

Description Microsoft Internet Information Server IIS is prone to a remote code-execution vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. To exploit this issue, attackers must be able to place and execute...

CVE-2006-3418

Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...

CVE-2006-3331

Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks...

Microsoft SMB Driver Local Denial Of Service Vulnerability

Description The Microsoft SMB driver is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to create processes that cannot be killed in affected operating systems, potentially denying service to legitimate users and other software on affected computers. This...

Hidden in the conspiracy behind the browser hijack attack and Defense-bug warning-the black bar safety net

“Browser hijacking”, the popular point said is deliberately misleading browser the route of a phenomenon, a common browser hijacker phenomenon:to access the normal site is diverted to a malicious Web page, when input the wrong URL was transferred to the hijacking software the specified website,...

CVE-2006-2531

Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to "Ipswitch/1.0" and the User-Application header to "NmConsole"...