Code injection

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-19 Unauthenticated XXE in /management/UdpHttpService issue...

CVE-2018-18659

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-19 Unauthenticated XXE in /management/UdpHttpService issue...

CVE-2018-18660

Arcserve UDP (Arcserve Unified Data Protection) up to 6.5 Update 4 is affected by a reflected Cross-Site Scripting (XSS) in /authenticationendpoint/domain.jsp (DDI-VRT-2018-21). Root cause is input handling leading to script injection; this is a client-side vulnerability that could affect users i...

CVE-2018-18658

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-20 Unauthenticated Sensitive Information Disclosure via /UDPUpdates/Config/FullUpdateSettings.xml issue...

CVE-2018-18658

Arcserve UDP before and including 6.5 Update 4 is affected by an unauthenticated information disclosure via the file path /UDPUpdates/Config/FullUpdateSettings.xml (DDI-VRT-2018-20). This CVE (CVE-2018-18658) enables an unauthenticated disclosure of sensitive information in the affected deploymen...

CVE-2018-18660

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-21 Reflected Cross-site Scripting via /authenticationendpoint/domain.jsp issue...

CVE-2018-18657

Arcserve UDP up to 6.5 Update 4 is affected by an unauthenticated information disclosure via the EdgeServiceImpl endpoint (/gateway/services/EdgeServiceImpl). The issue, DDI-VRT-2018-18, allows disclosure of sensitive information without authentication. Affected product: Arcserve Unified Data Pro...

CVE-2018-18659

Arcserve UDP (Arcserve Unified Data Protection) up to version 6.5 Update 4 contains an unauthenticated XML External Entity (XXE) issue in the /management/UdpHttpService endpoint (DDI-VRT-2018-19). This vulnerability is documented across multiple sources and affects UDP 6.5 Update 4 and earlier ve...

CVE-2018-18657

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-18 Unauthenticated Sensitive Information Disclosure via /gateway/services/EdgeServiceImpl issue...

SUSE SLED12 / SLES12 Security Update : net-snmp (SUSE-SU-2018:3447-1)

This update for net-snmp fixes the following issues : Security issues fixed : CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Deni...

openSUSE Security Update : net-snmp (openSUSE-2018-1243)

This update for net-snmp fixes the following issues : Security issues fixed : - CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in...

Security update for net-snmp (important)

This update for net-snmp fixes the following issues: Security issues fixed: - CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Deni...

SUSE-SU-2018:3319-1 Security update for net-snmp

This update for net-snmp fixes the following issues: - CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. bsc11111...

echo Service Reporting (TCP + UDP)

An echo Service is running at this Host via TCP and/or UDP. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : tinc -- Buffer overflow (a4eb38ea-cc06-11e8-ada4-408d5cf35399)

tinc-vpn.org reports : The authentication protocol allows an oracle attack that could potentially be exploited. If a man-in-the-middle has intercepted the TCP connection it might be able to force plaintext UDP packets between two nodes for up to a PingInterval period. C Tenable Network Security,...

Net-SNMP Denial of Service Vulnerability

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices and so on. A security vulnerability exists in the 'snmpoidcompare' function in the snmplib/snmpapi.c file in Net-SNMP versions prior to 5.8. ...

CVE-2018-18065

setkey in agent/helpers/tablecontainer.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...

Debian DSA-4312-1 : tinc - security update

Several vulnerabilities were discovered in tinc, a Virtual Private Network VPN daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2018-16738 Michael Yonli discovered a flaw in the implementation of the authentication protocol that could allow a remo...

Null pointer dereference

snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...

CVE-2018-18066

snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...