CVE-2012-0646

Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file...

CVE-2012-0646

CVE-2012-0646 affects Apple iOS prior to 5.1, describing a format string vulnerability in the VPN racoon configuration handler that could allow remote code execution with system privileges when a crafted racoon file is processed. The core issue is a format-string vulnerability in the VPN configur...

Iran Temporarly Blocks Access to Email for some 30,000

Internet service providers ISP acting on behalf of the Iranian government have recently begun blocking encrypted internet services that rely on the secure sockets layer SSL protocol, curbing the use of virtual private networks VPN, a number of email providers, and other communication tools ahead ...

GMS (Global Media Service) Remote SQLi Vulnerability

Exploit for php platform in category web applications GMS Global Media Service Remote SQLi Vulnerability Software : Global Media Service Date : 1/28/2012 Vendor : http://g-m-s.co.jp Get App. : order here: http://g-m-s.co.jp/hpfm.php?filehp=index.php&pageno=7&dataid=38938 Dork : intext:"Powered by...

Global Media Service SQL Injection

GMS Global Media Service Remote SQLi Vulnerability Software : Global Media Service Date : 1/28/2012 Vendor : http://g-m-s.co.jp Get App. : order here: http://g-m-s.co.jp/hpfm.php?filehp=index.php&pageno=7&dataid=38938 Dork : intext:"Powered by GMS" Author : ITTIHACK Home : http://ittihack.com...

SOPA in US and Censorship in India: A cocktail to destroy Internet Freedom !

SOPA in US and Censorship in India : A cocktail to destroy Internet Freedom ! As US senators mull over the SOPAStopping Online Piracy Act and PIPAProtecting Intellectual Property Act bills, the world stands witness to a historic moment. Almost all big IT companies like Google, Wikipedia, Facebook...

Barracuda SSL VPN 480 Script Insertion

Title: ====== Barracuda SSL VPN 480 - Multiple Web Vulnerabilities Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=35 VL-ID: ===== 35 Introduction: ============= The Barracuda SSL VPN is an integrated hardware and software solution enabling secure...

MICROSYS PROMOTIC Use After Free Vulnerability

Overview This advisory is a follow-up to ICS-ALERT-11-333-01 - MICROSYS PROMOTIC Use-After-Free Vulnerability, released on the ICS-CERT Web site on November 28, 2011. Independent researcher Luigi Auriemma has identified and released proof of concept code POC for a use after free vulnerability in...

Siemens Scalance X Buffer Overflow Vulnerability

Overview ICS-CERT has received a report from Siemens regarding a buffer overflow vulnerability in the web interface of the Scalance X Industrial Ethernet switch. This vulnerability was reported to Siemens by Jürgen Bilberger from Daimler TSS GmbH. This vulnerability leaves the affected devices...

Barracuda SSL VPN 480 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda SSL VPN 480 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=35 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 35...

Barracuda SSL VPN 480 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda SSL VPN 480 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=35 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 35...

Cisco IOS SSL VPN Vulnerability (cisco-sa-20100922-sslvpn)

Cisco IOS Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect. Exploitation could allow a remote, unauthenticated user to cause a memory leak on the affected devices, that could result in a memory exhaustion condition that may cause device...

Citrix Access Gateway Plug-in ActiveX Code Execution (CVE-2011-2882)

Citrix Access Gateway is an enhanced SSL VPN system which not only provides VPN access, but also enables application level access control. The system is available as standalone software, a physical appliance or a virtual machine. It is designed to work with Citrix XenApp and XenDesktop to allow...

Barracuda Web Firewall 660 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Web Firewall 660 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=29 Release Date: ============= 2011-12-16 Vulnerability Laboratory ID VL-ID: ==================================== 30...

Barracuda Web Firewall 660 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Web Firewall 660 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=29 Release Date: ============= 2011-12-16 Vulnerability Laboratory ID VL-ID: ==================================== 30...

Multiple Vulnerabilities Haunt Long List of PLC Modules

A long list of industrial-control modules manufactured by Schneider Electric and used to control operations at various industrial facilities contain multiple weaknesses and vulnerabilities that could allow an attacker to modify the firmware, login remotely and run arbitrary code on the vulnerable...

Fedora Update for openswan FEDORA-2011-15127

Check for the Version of openswan OpenVAS Vulnerability Test Fedora Update for openswan FEDORA-2011-15127 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 15 Update: openswan-2.6.37-1.fc15

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 14 Update: openswan-2.6.33-3.fc14

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 16 Update: openswan-2.6.37-1.fc16

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...