Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : fetchmail vulnerability (USN-816-1)

Matthias Andree discovered that fetchmail did not properly handle certificates with NULL characters in the certificate name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Securi...

USN-816-1: fetchmail vulnerability

Matthias Andree discovered that fetchmail did not properly handle certificates with NULL characters in the certificate name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

USN-810-1: NSS vulnerabilities

Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service via application crash or execute arbitrary code as the user invoking the program. CVE-2009-2404 Moxie...

Bopup Communication Server Remote Buffer Overflow Vulnerability

This host has Bopup Communication Server installed and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodbopupserverbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Bopup Communication Server Remote Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright:...

Court Rules in Favor of Kaspersky in Filtering Case

From Wired David Kravets A federal appeals court, in the first decision of its kind, said Thursday that companies providing malware, spyware and adware blocking services are immunized by the Communications Decency Act of 1996 from lawsuits claiming unfair business practices. A three-judge panel o...

Bopup Communications Server (3.2.26.5460) Remote BOF Exploit (SEH)

No description provided by source. !/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : Bopup Communications Server 3.2.26.5460 Remote BOF Exploit SEH Tested on : Xp sp3 ENVB Refer : mu-b Exploited by : His0k4 Greetings : All...

Bopup Communications Server Buffer Overflow

!/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | -" %sys.argv0 sys.exit0 win32adduser - PASS=27 EXITFUNC=seh USER=dz Size=228 Encoder=PexFnstenvSub http://metasploit.com shellcode= "\x44\x7A\x32\x37\x44\x7A\x32\x37\x29\xc9\x83\xe9\xcd\xd9\xee\xd9"...

Bopup Communications Server (3.2.26.5460) Remote BOF Exploit (SEH)

Exploit for windows platform in category remote exploits ================================================================== Bopup Communications Server 3.2.26.5460 Remote BOF Exploit SEH ================================================================== !/usr/bin/python Usage : python bopup.py...

Bopup Communications Server 3.2.26.5460 - Remote Buffer Overflow (SEH)

Bopup Communications Server 3.2.26.5460 - Remote Buffer Overflow SEH !/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | -" %sys.argv0 sys.exit0 win32adduser - PASS=27 EXITFUNC=seh USER=dz Size=228 Encoder=PexFnstenvSub http://metasploit.com shellcode=...

Bopup Communications Server 3.2.26.5460 - Remote Buffer Overflow (SEH)

!/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | -" %sys.argv0 sys.exit0 win32adduser - PASS=27 EXITFUNC=seh USER=dz Size=228 Encoder=PexFnstenvSub http://metasploit.com shellcode= "\x44\x7A\x32\x37\x44\x7A\x32\x37\x29\xc9\x83\xe9\xcd\xd9\xee\xd9"...

Bopup Communications Server 3.2.26.5460 Remote SYSTEM Exploit

Exploit for windows platform in category remote exploits ============================================================= Bopup Communications Server 3.2.26.5460 Remote SYSTEM Exploit ============================================================= / bopup-down.c Copyright c 2008 Bopup Communications...

Bopup Communications Server 3.2.26.5460 - Remote SYSTEM

/ bopup-down.c Copyright c 2008 by Bopup Communications Server remote SYSTEM exploit by mu-b - Sat Feb 08 2008 - Tested on: Bopup Communications Server 3.2.26.5460 Mar 18 2009 .text:00407A17 lea eax, ebp+pkt0x19 .text:00407A1D push eax .text:00407A1E lea eax, ebp+var354 .text:00407A24 push eax...

[SECURITY] Fedora 11 Update: openssl-0.9.8k-5.fc11

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

[SECURITY] Fedora 10 Update: openssl-0.9.8g-14.fc10

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Bopup Communications Server Buffer Overflow

This module exploits a stack buffer overflow in Bopup Communications Server 3.2.26.5460. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/misc/bopup/comm msf undefinedcomm show actions ...actions... msf undefinedcomm...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

CVE-2009-1729

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

CVE-2009-1729

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

CVE-2009-1729

CVE-2009-1729 corresponds to multiple XSS flaws in Sun Java System Communications Express 6.2 (2005Q4) and 6.3. The vulnerabilities are in the Personal Address Book Add Contact path (uwc/abs/search.xml) via abperson_displayName and in UWCMain (uwc/base/UWCMain) via temporaryCalendars. Impact is c...

CVE-2009-1729: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...