RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

DEBIAN-CVE-2009-0790

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service daemon crash and restart via a crafted 1 RUTHERE or 2 RUTHEREACK Dead Peer Detection DPD IPsec...

CVE-2009-0790: ISAKMP DPD Remote Vulnerability with Openswan & Strongswan IPsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================================== Openswan & Strongswan Security Notification March 30, 2009 Remote DoS Vulnerability in Openswan & Strongswan IPsec CVE-2009-0790...

RHEL 5 : openswan (RHSA-2009:0402)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0402 advisory. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provi...

openswan: ISAKMP DPD remote DoS

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service daemon crash and restart via a crafted 1 RUTHERE or 2 RUTHEREACK Dead Peer Detection DPD IPsec...

vividads-sql.txt

Vivid Ads Shopping Cart cid Remote SQL Injection Discovered By : [email protected] 15/10/2008 HomePage : http://mildnet.org Thx to : Nyubi aka Solpot,homeedition2001,dead,ardan, anakbugis,kaka11,rahulxisback,antiunderground,cheio AND FOR ALL IRC.MILDNET.ORG COMMUNITY Dork : "Vivid Ads...

CVE-2008-4476

sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympaaliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability...

Design/Logic Flaw

sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympaaliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability...

Unreal Engine - UnChan.cpp Failed Assertion Remote Denial of Service

Unreal Engine - UnChan.cpp Failed Assertion Remote Denial of Service source: https://www.securityfocus.com/bid/31205/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that us...

Unreal Engine - 'UnChan.cpp' Failed Assertion Remote Denial of Service

source: https://www.securityfocus.com/bid/31205/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use the vulnerable engine and deny service to legitimate users. The...

Emulive Server4 7560 Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl EmuLive Server4 Commerce Edition Build 7560 Remote crash proof of conecpt code. When the machine running Server4 recieves a malformed request on TCP port 66 it crashes very hard! GulfTech Security http://www.gulftech.org use IO::Socket; unless...

kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux RHEL 4, allows local users to cause a denial of service oops via a long series of PTRACEATTACH ptrace calls to another user's process that trigger a conflict between...

Unfixed XSS vulnerability at www.dead-sea.org.il

Security researcher wir3less-hack3r, has submitted on 27/04/2008 a cross-site-scripting XSS vulnerability affecting www.dead-sea.org.il, which at the time of submission ranked 1367080 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2008. ...

Fedora 8 : ruby-1.8.6.114-1.fc8 (2008-2443)

Tue Mar 4 2008 Akira TAGOH - 1.8.6.114-1 - Security fix for CVE-2008-1145. - Improve a spec file. 226381 - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. - Tue Feb 19 2008 Fedora Release Engineering - 1.8.6.111-9 - Autorebuild for GCC 4.3 - Tue Feb 19 2008 Akira...

Fedora 7 : ruby-1.8.6.114-1.fc7 (2008-2458)

Tue Mar 4 2008 Akira TAGOH - 1.8.6.114-1 - Security fix for CVE-2008-1145. - Improve a spec file. 226381 - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. - Tue Feb 19 2008 Fedora Release Engineering - 1.8.6.111-9 - Autorebuild for GCC 4.3 - Tue Feb 19 2008 Akira...

Moderate: Red Hat Security Advisory: conga security, bug fix, and enhancement update

Updated conga packages that correct a security flaw and provide bug fixes and add enhancements are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Conga package is a web-based administration tool for remote cluster and storag...

Unfixed XSS vulnerability at www.billgatesisdead.com

Security researcher Fugitif, has submitted on 18/10/2007 a cross-site-scripting XSS vulnerability affecting www.billgatesisdead.com, which at the time of submission ranked 851113 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...