[security bulletin] SSRT3613 rev.0 HP-UX B6848AB GTK+ Support Libraries - elevated privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01034 REVISION: 0 SSRT3613 rev.0 HP-UX B6848AB GTK+ Support Libraries elevated privileges ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...

Nortel Wireless LAN Access Point 2200 Series - Denial of Service

// source: https://www.securityfocus.com/bid/9787/info Nortel Wireless LAN Access Point 2200 series appliances have been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when a large network request is handled by one of the Wireless LAN...

MS Windows XP Workstation Service Remote Exploit (MS03-049)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows XP Workstation Service Remote Exploit MS03-049 =========================================================== / To build new netapi32.lib pedump /exp netapi32.dll...

Sun Java Media Framework (JMF) Arbitrary Code Execution

The remote host is using Sun Microsystems's Java Media Framework JMF. There is a bug in the version installed that may allow an untrusted applet to crash the Java Virtual Machine it is being run on, or even to gain unauthorized privileges. An attacker could exploit this flaw to execute arbitrary...

Network Chemistry Wireless Sensor Detection

The remote host is a WSP100 802.11b Remote Sensor from Network Chemistry. This device sniffs data flowing on the channels used by 802.11b and forwards it to any host which 'subscribes' to this device. An attacker may use this device to sniff 802.11b networks of the area it is deployed from any...

cvsupd-startup.txt

Hi, Better not to file a PR for this, I feel. I was just passing by net/cvsup-mirror/files/cvsupd.sh when I noticed that it appends to the fixed-name file /var/tmp/cvsupd.out Therefore if I were a malicious user, I could make a symlink of that name in /var/tmp to effect arbitrary file corruption...

CVE-2001-0816

OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorizedkeys2 command= restrictions using sftp commands...

CVE-1999-1455

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host...

PT-2001-2669 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH version 2.3.1 Description: The issue concerns the SSH protocol 2 public key authentication in OpenSSH, which does not perform a challenge-response step to verify that the client has the proper private key. This allows remote attackers...

CVE-2001-0816

OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorizedkeys2 command= restrictions using sftp commands...

PT-2001-1065 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: openssh-server versions 2.9p2 through 2.9.8 openssh-clients version 2.9p2 openssh version 2.9p2 openssh-askpass-gnome version 2.9p2 openssh-askpass version 2.9p2 Description: The issue affects the confidentiality, integrity, and availability ...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE. The SSH protocols 1 and 2 aka SSH-2 as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: 1 password lengths o...

CVE-2001-0572

The SSH protocols 1 and 2 aka SSH-2 as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: 1 password lengths or ranges of lengths, which simplifies brute force password guessing, 2 whether RSA or DS...

PT-2001-1770 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The SSH protocols 1 and 2 as implemented in OpenSSH have various weaknesses that can allow a remote attacker to obtain sensitive information via sniffing. This includes password lengths or...

DoS против Windows 2000 (повреждение файла локальной политики)

Повредив файлы локальной политики авторизованный опльзователь может вывести систему из строя...