466 matches found
CVE-2014-8654
Multiple cross-site request forgery CSRF vulnerabilities in Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway hardware 1.0 with firmware CH6640-3.5.11.7-NOSH allow remote attackers to hijack the authentication of administrators for requests that 1 have unspecified impact on DDNS...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway hardware 1.0 with firmware CH6640-3.5.11.7-NOSH allow remote attackers to hijack the authentication of administrators for requests that 1 have unspecified impact on DDNS...
openSUSE Security Update : bind (openSUSE-SU-2011:0135-1)
This bind update fixes a remote denial of service vulnerability that can be triggered using an IXFR or DDNS update. CVE-2011-0414: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
openSUSE Security Update : dhcp (openSUSE-2012-71)
Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix: Modify the DDNS handling code. In a previous patch we added logging code to the DDNS handling. This code included a bug that caused it to attempt to dereference a NULL pointer and eventually segfault. While reviewing the code as...
FOSCAM IP-Cameras - Improper Access Restrictions
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ FOSCAM IP-Cameras Improper Access Restrictions 1. Advisory Information Title: FOSCAM IP-Cameras Improper Access Restrictions Advisory ID: CORE-2013-0613 Advisory URL:...
FOSCAM IP-Cameras Improper Access Restrictions
Advisory ID Internal CORE-2013-0613 1. Advisory Information Title: FOSCAM IP-Cameras Improper Access Restrictions Advisory ID: CORE-2013-0613 Advisory URL:http://www.coresecurity.com/advisories/foscam-ip-cameras-improper-access-restrictions Date published: 2013-07-23 Date of last update:...
SuSE 11.2 Security Update : dhcp (SAT Patch Number 7571)
The ISC DHCP server had a denial of service issue in handling specific DDNS requests which could cause a out of memory usage situation. CVE-2013-2266 This update also adds a dhcp6-server service template for SuSEfirewall2. bnc783002 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Linksys WRT160N XSS / CSRF / Command Injection
Device Name: Linksys WRT160Nv2 Vendor: Linksys/Cisco ============ Device Description: ============ Best For: Delivers plenty of speed and coverage, so large groups of users can go online, transfer large files, print, and stream stored media Features: Fast Wireless-N connectivity frees you to do...
Multiple DVR Manufacturers Configuration Disclosure
This module takes advantage of an authentication bypass vulnerability at the web interface of multiple manufacturers DVR systems, which allows to retrieve the device configuration. This module requires Metasploit: https://metasploit.com/download Current source:...
SuSE 11.2 Security Update : dhcp (SAT Patch Number 6606)
This update provides dhcp 4.2.4-p1, which fixes the dhcpv6 server crashing while accessing the lease on heap and provides the following additional fixes : - Security fixes : - Previously the server code was relaxed to allow packets with zero length client ids to be processed. Under some situation...
CVE-2011-4868
ISC DHCP (dhcpd) before 4.2.3-P2 is affected when using Dynamic DNS with IPv6. The issue lies in the logging/DDNS handling of the DHCPv6 lease structure during lease-status updates, which can trigger a NULL pointer dereference and crash the daemon (denial of service). Exploitation details are not...
NetGear C DSL Router R0318 - Multiple Web Vulnerabilities
Document Title: =============== NetGear C DSL Router R0318 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-18 Vulnerability Laboratory ID VL-ID: ==================================== 40 Product & Service Introduction: =============================== RO318 ergänzt Produktfamilie...
ISC BIND 9.7.1 - 9.7.2-P3 IXFR /DDNS Update Combinded with High Query Rate DoS
Binary data 5803.prm...
CVE-2011-0414
ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service deadlock and daemon hang by sending a query at the time of 1 an IXFR transfer or 2 a DDNS update...
CVE-2011-0414
ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service deadlock and daemon hang by sending a query at the time of 1 an IXFR transfer or 2 a DDNS update...
Code injection
ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service deadlock and daemon hang by sending a query at the time of 1 an IXFR transfer or 2 a DDNS update...
CVE-2011-0414
CVE-2011-0414 affects ISC BIND versions 9.7.1 through 9.7.2-P3 when configured as an authoritative server. A race condition during IXFR transfers or DDNS updates can cause a remote denial of service (deadlock/daemon hang). Public advisories across distributions (Debian, openSUSE, Gentoo, etc.) do...
CVE-2011-0414
ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service deadlock and daemon hang by sending a query at the time of 1 an IXFR transfer or 2 a DDNS update...
openSUSE 10 Security Update : bind (bind-6383)
Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if BIND is master for a zone even if ddns is not configured CVE-2009-0696. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
SuSE9 Security Update : bind (YOU Patch Number 12462)
Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if bind is master for a zone even if ddns is not configured CVE-2009-0696. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...