Axis Communications MPQT/PACS SSI Remote Format String / Code Execution

!/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following characteristic: - Heap Based Exploiting string located on the heap - Blind Attack No output...

Authd Local Information Disclosure Vulnerability

Authd is a daemon for the RFC 1413 set of ident protocols. Authd suffers from an information disclosure vulnerability that could be exploited by an attacker to submit a special request for sensitive information...

Updated util-linux packages fix security vulnerability

The util-linux libblkid is vulnerable to a Denial of Service attack during MSDOS partition table parsing, in the extended partition boot record EBR. If the next EBR starts at relative offset 0, parsedosextended will loop until running out of memory. An attacker could install a specially crafted...

[SECURITY] Fedora 24 Update: community-mysql-5.7.12-1.fc24

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

NSD (Name Server Daemon) < 4.1.11 AXFR Response DoS Vulnerability

NSD Name Server Daemon is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the integrity of protected information

The vdr-daemon package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a breach of the integrity of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the WebSphere Application Server software allows a malicious attacker to compromise the accessibility of protected information.

A vulnerability in the web server plugin of IBM WebSphere Application Server WAS, when the POST requester function is enabled, allows malicious actors operating remotely to cause a service failure abnormal termination of the daemon...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libgtop2-daemon package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libgtop-daemon package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the BIND Server software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability exists in libdns within ISC BIND due to incorrect processing of EDNS parameters. Exploiting this vulnerability allows malicious actors operating remotely to trigger a service failure a REQUIRE validation error and termination of the daemon using a specially crafted package...

The vulnerability of Samba software allows a malicious individual to compromise the accessibility of protected information.

The vulnerability in the pushascii function of Samba’s smbd allows remote users who have completed authentication to trigger a service failure—a memory-related error and an unexpected termination of the daemon—by attempting to read the path name in Unicode format without using Unicode. This leads...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the krb5-ftpd package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Apache HTTP Server software allows a malicious attacker to compromise the accessibility of protected information.

A vulnerability exists in the cacheinvalidate function in the modules/cache/cachestorage.c module of the modcache module in the Apache HTTP Server. When the caching proxy server is enabled, this vulnerability allows remote HTTP servers to cause a service failure by reassigning the null pointer an...

Vulnerability of Cisco Nexus 7000 software, allowing attackers to access confidential information

The GNU Bash command shell, as of version 4.3 bash43-025 and later, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other undefined actions...

CVE-2016-4957

ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service daemon crash via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547...

DEBIAN-CVE-2016-4953

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service ephemeral-association demobilization by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time...

CVE-2016-4957

ntpd (NTP) before version 4.2.8p8 is vulnerable to a remote DoS via specially crafted crypto-NAK packets, causing ntpd to crash. This issue stems from an incorrect fix applied after CVE-2016-1547 and affects ntpd’s handling of CRYPTO-NAK. Public references indicate an impact to the daemon’s avail...

The vulnerability of the Cisco IOS operating system, which allows a malicious individual to execute arbitrary code or cause a service failure.

A vulnerability exists in the Line Printer Daemon LPD of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure on the device by sending a long name of a node, or execute arbitrary code on it...

Exim 4 (Debian 8 Ubuntu 16.04) - Spool Privilege Escalation

Exim 4 Debian 8 Ubuntu 16.04 - Spool Privilege Escalation / -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello List, This is just a minor issue in Exim, no replies so far, so publication should be OK. Introduction: ============ Exim4 in some variants is started as root but switches to uid/gid...

DEBIAN-CVE-2016-2074

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command...