Fedora 18 : ruby-1.9.3.448-31.fc18 (2013-12123)

A vulnerability was found in Ruby's SSL client that could allow man-in-the-middle attackers to spoof SSL servers via valid certificate issued by a trusted certification authority. This vulnerability has been assigned the CVE identifier CVE-2013-4073. This new update should solve this issue. Note...

Fedora 17 : ruby-1.9.3.448-31.fc17 (2013-12062)

A vulnerability was found in Ruby's SSL client that could allow man-in-the-middle attackers to spoof SSL servers via valid certificate issued by a trusted certification authority. This vulnerability has been assigned the CVE identifier CVE-2013-4073. This new update should solve this issue. Note...

[slackware-security] ruby (SSA:2013-178-01)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security ruby SSA:2013-178-01 New ruby packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: +--------------------------+...

jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name

It was found that Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

Low: Red Hat Security Advisory: busybox security and bug fix update

Updated busybox packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

Issue key can be enumerated - Resolve Issue Feature

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to horizontal privilege elevation attacks within the Resolve Issue feature, accessible through the given address:...

Issue key can be enumerated - Resolve Issue Feature

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to horizontal privilege elevation attacks within the Resolve Issue feature, accessible through the given address:...

USN-1228-1 : linux-ti-omap4 vulnerabilities

Timo Warns discovered that the EFI GUID partition table was not correctly parsed. A physically local attacker that could insert mountable devices could exploit this to crash the system or possibly gain root privileges. CVE-2011-1776 Dan Rosenberg discovered that the IPv4 diagnostic routines did n...

MS Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability (2520426)

This host is missing a critical security update according to Microsoft Bulletin MS11-040 OpenVAS Vulnerability Test $Id: secpodms11-040.nasl 5362 2017-02-20 12:46:39Z cfi $ MS Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability 2520426 Authors: Antu Sanadi...

MS11-043: Vulnerability in SMB Client Could Allow Remote Code Execution (2536276)

The version of the SMB client software installed on the remote Windows host has an unspecified code execution vulnerability. The client does not properly parse unspecified SMB responses. A remote, unauthenticated attacker could exploit this to execute arbitrary code. C Tenable Network Security,...

Novell iPrint Client Netscape/ActiveX Location Header Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. Authentication is not required to exploit this vulnerability. The flaw exists within the nipplib.dll component which is used by both the Mozilla and IE browser plugins for...

3D FTP Client Directory Traversal Vulnerability

This host is installed with 3D FTP Client and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpod3dftpclientdirtraversalvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ 3D FTP Client Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright C 2010...

Xftp FTP Client 3.0 PWD Remote Buffer Overflow Exploit

$Id: xftpclientpwd.rb 9143 2010-04-26 18:56:46Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Xftp client 3.0 PWD Remote Exploit

No description provided by source. !/usr/bin/perl use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-new LocalPort = '21', Proto = 'tcp', Listen = '1' or die "Socket Not Created $!\n"; print "\n" . "Xftp client 3.0 PWD Exploit \n" . "Listening on port 21 \n" . "By:zombiefx Emai...

CVE-2010-0477

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle 1 SMBv1 and 2 SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the respons...

BulletProof FTP 2.63 b56 Client Malformed '.bps' File Stack Buffer Overflow

No description provided by source. / BulletProof FTP Client suffer a buffer overflow SEH. Tested on BullerProof FTP Client v. 2.63 build 56 The last one but may work with older releases as well Registers: EAX 00000000 ECX 65646362 EDX 7C9032BC ntdll.7C9032BC EBX 00000000 ESP 0012F1E0 EBP 0012F200...

32bit FTP (PASV) Reply Client Remote Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ============================================================ 32bit FTP PASV Reply Client Remote Overflow Exploit meta ============================================================ msf use exploit/windows/ftp/32bitftppasvreply msf...

CVE-2007-0004

The NFS client implementation in the kernel in Red Hat Enterprise Linux RHEL 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfspermission mode bits data rather than an NFS ACCESS call to the server, which allows local client processes to...

CVE-2007-4449

The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service application hang via a command without an LF character, as demonstrated by a SAY command...

0irc-client v1345 build20060823 Denial of Service Exploit

No description provided by source. / 0irc-client v1345 build 20060823 DoS Exploit By DiGitalX [email protected] Date: 22/3/2007 -- MicroSystem Team -- Site: http://DiGitalX.I.am Description: 0irc-client suffers from a NULL pointer derefrencing bug. / define WIN32LEANANDMEAN include winsock2.h...