vino security update

2.28.1-9 - Reject clients in deferred auth state - Bug 1009228...

Debian DSA-2783-1 : librack-ruby - several vulnerabilities

Several vulnerabilities were discovered in Rack, a modular Ruby webserver interface. The Common Vulnerabilites and Exposures project identifies the following vulnerabilities : - CVE-2011-5036 Rack computes hash values for form parameters without restricting the ability to trigger hash collisions...

Debian Security Advisory DSA 2783-1 (librack-ruby - several vulnerabilities)

Several vulnerabilities were discovered in Rack, a modular Ruby webserver interface. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2011-5036 Rack computes hash values for form parameters without restricting the ability to trigger hash collisions...

Monstra CMS v1.2.0 - Blind SQL Injection Vulnerability

Document Title: =============== Monstra CMS v1.2.0 - Blind SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1081 Release Date: ============= 2013-09-19 Vulnerability Laboratory ID VL-ID: ==================================== 108...

Multiple Vulnerabilities in Cisco Firewall Services Module Software (cisco-sa-20130410-fwsm)

The remote Cisco Firewall Services Module FWSM for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers may be affected by the following vulnerabilities : - A flaw in the FWSM software could allow remote attackers to cause a denial of service DoS condition via a crafted IKEv1 message...

Information disclosure

The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate...

CVE-2013-1028

Apple Mac OS X before 10.8.5 is affected by CVE-2013-1028 in its IPSec implementation when Hybrid Auth is used: X.509 certificates from security gateways are not verified, enabling MITM attackers to spoof gateways and exfiltrate data via crafted certificates. The OpenVAS/NVD entries confirm the i...

CVE-2013-1028

The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate...

Apple Mac OS X 'IPSec Hybrid Auth' 服务器证书安全绕过漏洞(CVE-2013-1028)

BUGTRAQ ID: 62371 CVECAN ID: CVE-2013-1028 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4存在安全漏洞，攻击者可以截获IPSec Hybrid Auth所保护的数据。IPSec Hybrid Auth服务器的DNS名称没有匹配证书，可使具有任何服务器证书的攻击者利用此漏洞模拟其他服务器。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁:...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15253

Check for the Version of php-pear-Auth-OpenID OpenVAS Vulnerability Test Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15253 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15258

Check for the Version of php-pear-Auth-OpenID OpenVAS Vulnerability Test Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15258 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora 18 : php-pear-Auth-OpenID-2.2.2-7.fc18 (2013-15253)

Fix for CVE-2013-4701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15253

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15258

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : php-pear-Auth-OpenID-2.2.2-7.fc19 (2013-15258)

Fix for CVE-2013-4701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

freeFTPd 1.0.10 Buffer Overflow

!/usr/bin/perl freeFTPd 1.0.10 anonymous-auth PASS SEH buffer overflow PoC by Wireghoul - www.justanotherhacker.com Date: 20130820 Tested on: XPSP3 Similar exploits: EDB 23079 1330 1339 Greetz corelan, TecR0C, mrme, jjkakakk if scalar@ARGV != 2 "Usage $0 host port\n"; exit; use IO::Socket::INET;...

PayPal Account System - Auth Bypass Session Issue

Document Title: =============== PayPal Account System - Auth Bypass Session Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1057 View: http://www.youtube.com/watch?v=tk9aMBpayS8 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1056 Release Date:...

PayPal Account System - Auth Bypass Session Issue

Document Title: =============== PayPal Account System - Auth Bypass Session Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1057 View: http://www.youtube.com/watch?v=tk9aMBpayS8 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1056 Release Date:...

Open And Compact FTP Server 1.2 Bypass / Directory Traversal

!/usr/bin/python Exploit Title: Open&Compact Ftp Server = 1.2 Auth bypass & directory traversal sam retrieval Date: Aug 7, 2013 By Wireghoul - http://www.justanotherhacker.com Based on Serge Gorbunov's auth bypass http://www.exploit-db.com/exploits/13932/ Software Link:...

Open&Compact FTP Server 1.2 - Auth Bypass & Directory Traversal SAM Retrieval Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Open&Compact Ftp Server = 1.2 Auth bypass & directory traversal sam retrieval Date: Aug 7, 2013 By Wireghoul - http://www.justanotherhacker.com Based on Serge Gorbunov's auth bypass...