Ubuntu Update for dnsmasq vulnerability USN-627-1

Ubuntu Update for Linux kernel vulnerabilities USN-627-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6271.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for dnsmasq vulnerability USN-627-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Six months later, DNS still taking a hit

It’s been more than six months since Dan Kaminksy detailed the problems he had found lurking in the DNS system, and the coordinated patching effort that followed his discovery was nothing short of extraordinary. A huge percentage of the vulnerable servers were patched before the details of the fl...

NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/31853/info MIFARE Classic is prone to multiple security weaknesses: 1. A security weakness may allow attackers to recover the internal state of the linear feedback shift register. 2. A security weakness may allow attackers to recover the previous state of...

NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities

NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/31853/info MIFARE Classic is prone to multiple security weaknesses: 1. A security weakness may allow attackers to recover the internal state of the linear feedback shift register. 2. A...

Gentoo Security Advisory GLSA 200608-20 (rails)

The remote host is missing updates announced in advisory GLSA 200608-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 1619-1 (python-dns)

The remote host is missing an update to python-dns announced via advisory DSA 1619-1. OpenVAS Vulnerability Test $Id: deb16191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1619-1 python-dns Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Python: Multiple vulnerabilities

Background Python is an interpreted, interactive, object-oriented programming language. Description Multiple vulnerabilities were discovered in Python: David Remahl of Apple Product Security reported several integer overflows in core modules such as stringobject, unicodeobject, bufferobject,...

Debian: Security Advisory (DSA-1546-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1546-1 : gnumeric - integer overflow

Thilo Pfennig and Morten Welinder discovered several integer overflow weaknesses in Gnumeric, a GNOME spreadsheet application. These vulnerabilities could result in the execution of arbitrary code through the opening of a maliciously crafted Excel spreadsheet. %NASLMINLEVEL 70300 C Tenable Networ...

rPSA-2008-0056-1 mailman

rPath Security Advisory: 2008-0056-1 Published: 2008-02-15 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Weakness Updated Versions: mailman=conary.rpath.com@rpl:1/2.1.9-4.2-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-2207...

Debian Security Advisory DSA 269-2 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 269-2. OpenVAS Vulnerability Test $Id: deb2692.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 269-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Web Server Transmits Cleartext Credentials

The remote web server contains several HTML form fields containing an input of type 'password' which transmit their information to a remote web server in cleartext. An attacker eavesdropping the traffic between web browser and server may obtain logins and passwords of valid users. C Tenable Netwo...

ISC BIND 8 - Remote Cache Poisoning (1)

ISC BIND 8 - Remote Cache Poisoning 1 source: https://www.securityfocus.com/bid/25459/info BIND 8 is prone to a remote cache-poisoning vulnerability because of weaknesses in its random-number generator. An attacker may leverage this issue to manipulate cache data, potentially facilitating...

ISC BIND 8 - Remote Cache Poisoning (2)

source: https://www.securityfocus.com/bid/25459/info BIND 8 is prone to a remote cache-poisoning vulnerability because of weaknesses in its random-number generator. An attacker may leverage this issue to manipulate cache data, potentially facilitating man-in-the-middle, site-impersonation, or...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Mandrake Linux Security Advisory : smb4k (MDKSA-2007:042)

Kees Cook performed an audit on the Smb4K program and discovered a number of vulnerabilities and security weaknesses that have been addressed and corrected in Smb4K 0.8.0 which is being provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

Weaknesses in Pingback Design

Advisory: Weaknesses in Pingback Design Advisory ID: 4tphi-sa-20070111-pingback Release Date: 01-24-2007 Author: Blake Matheny [email protected] Software: Multiple Impact: Remote DoS Overview: From Wikipedia, "A Pingback is one of three types of Linkbacks, methods for Web authors to request...

BytesFall-exp.txt

Advisory: Authentication bypass in BytesFall Explorer A malicious user can bypass authentication and take over the role of the administrator of BytesFall Explorer by using an SQL injection. Several other SQL injections are possible. Details ======= Product: BytesFall Explorer Affected Versions: =...

Ultimate PHP Board <= 1.96 GOLD Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web applications ================================================================ Ultimate PHP Board "; $ikey = ordsubstr$key, $i, 1; // print $i."ikey:".$ikey.""; $itext = ordsubstr$text, $i, 1; // print $i."itext:".$itext.""; $nkey = ordsubstr$key, $i+1...

FreeBSD : openssl -- potential SSL 2.0 rollback (60e26a40-3b25-11da-9484-00123ffe8333)

Vulnerability : Such applications are affected if they use the option SSLOPMSIESSLV2RSAPADDING. This option is implied by use of SSLOPALL, which is intended to work around various bugs in third-party software that might prevent interoperability. The SSLOPMSIESSLV2RSAPADDING option disables a...