CVE-2015-4236

Cisco AsyncOS on Email Security Appliance ESA devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service clustering and SSH outage via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636...

CVE-2015-4236

Cisco AsyncOS for Email Security Appliances (ESA) with clustering enabled is affected on ESA software versions 8.5.6-073, 8.5.6-074, and 9.0.0-461. The issue stems from improper handling of high-rate packet floods, allowing remote attackers to trigger a denial-of-service condition that makes clus...

Cisco AsyncOS for Cisco Email Security Appliance and Cisco Web Security Appliance Cluster Denial of Service Vulnerability

A vulnerability in the clustering component of Cisco AsyncOS for Cisco Email Security Appliance ESA and Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause the device to become unresponsive on the clustering and SSH configured ports. The vulnerability is due ...

Moscrack v2.08b - Multifarious On-demand Systems Cracker (cracking WPA keys in parallel on a group of computers)

Moscrack is a perl application designed to facilitate cracking WPA keys in parallel on a group of computers. This is accomplished by use of either Mosix clustering software, SSH or RSH access to a number of nodes. With Moscrack's new plugin framework, hash cracking has become possible. SHA256/512...

BEA WebLogic JSESSIONID Cookie Value Overflow

No description provided by source. $Id: beaweblogicjsessionid.rb 9670 2010-07-03 03:19:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

Vivisimo Clustering Engine 0 Search Script Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8862/info Vivisimo Clustering Engine reported prone to cross-site scripting vulnerability. The problem occurs due to insufficient sanitization of parameters passed to the search script. As a result, an attacker may be...

Moscrack - Cluster Cracking Tool For WPA Keys

Moscrack is a PERL application designed to facilitate cracking WPA keys in parallel on a group of computers. This is accomplished by use of either Mosix clustering software, SSH or RSH access to a number of nodes. With Moscrack’s new plugin framework, hash cracking has become possible. SHA256/512...

Low: Red Hat Security Advisory: pacemaker security, bug fix, and enhancement update

Updated pacemaker packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...

Hazelcast Memcached Interface Detection

The memcached interface for Hazelcast, an open source data clustering solution, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67023; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Hazelcast Memcached Interfac...

Hazelcast REST Interface Detection

The REST interface for Hazelcast, an open source data clustering solution, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67024; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Hazelcast REST Interface...

Hazelcast Wire Protocol Detection

The wire protocol for Hazelcast, an open source data clustering solution, was found listening on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67022; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Hazelcast Wire Protocol...

WPA Cluster Cracker: Moscrack

Moscrack WPA Cluster Cracker Moscrack facilitates the use of a WPA cracker on a cluster. Currently it works with Mosix clustering software, SSH, RSH and Pyrit. It works by reading a word list from STDIN or a file, breaking it into chunks and passing those chunks off to seperate processes that run...

Scientific Linux Security Update : selinux-policy on SL6.x i386/x86_64 (20120307)

This update fixes the following bugs : - An incorrect SELinux policy prevented the qpidd service from connecting to the AMQP Advanced Message Queuing Protocol port when the qpidd daemon was configured with Corosync clustering. These selinux-policy packages contain updated SELinux rules, which all...

Microsoft Windows Failover Clustering File Permissions Security Bypass Vulnerability

Description Microsoft Windows Failover Clustering is prone to a security-bypass vulnerability. Local attackers can exploit this issue to perform unauthorized actions against the administrative shares on the failover cluster disk. Technologies Affected Microsoft Windows Server 2008 R2 Itanium...

BEA Weblogic JSESSIONID Cookie Value Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BEA Weblogic...

Fedora Update for R FEDORA-2008-7619

Check for the Version of R OpenVAS Vulnerability Test Fedora Update for R FEDORA-2008-7619 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

CVE-2003-1519

Cross-site scripting XSS vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web script or HTML via the query parameter to the search program...

CVE-2003-1519

The CVE-2003-1519 entry describes a Cross-site scripting (XSS) vulnerability in the Vivisimo clustering engine. Affected component is the search program’s query parameter, where user-supplied input can be returned to the browser and executed as script. The NVD metrics indicate a Medium severity (...

CVE-2006-4431

Multiple buffer overflows in the a Session Clustering Daemon and the b modcluster module in the Zend Platform 2.2.1 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via a 1 empty or 2 crafted PHP session identifier PHPSESSID...

CVE-2006-4431

CVE-2006-4431 affects Zend Platform (Session Clustering Daemon) and the mod_cluster module; versions 2.2.1 and earlier are vulnerable. The issue is multiple buffer overflows triggered by a PHPSESSID that is empty or crafted, allowing remote attackers to crash the service (DoS) or potentially exec...