Scientific Linux Security Update : openswan on SL5.x i386/x86_64

Gerd v. Egidy discovered a flaw in the Dead Peer Detection DPD in Openswan's pluto IKE daemon. A remote attacker could use a malicious DPD packet to crash the pluto daemon. CVE-2009-0790 It was discovered that Openswan's livetest script created temporary files in an insecure manner. A local...

Key Stuxnet LNK Spreading Mechanism Stops Working

One of the key infection methods for the Stuxnet worm was hard-coded to stop working on June 24, removing one of its techniques for propagation. Researchers say that the date, which is found in coded form in the worm’s instructions, is nearly three years to the day from the date that the first...

CentOS Update for openswan CESA-2009:0402 centos5 i386

Check for the Version of openswan OpenVAS Vulnerability Test CentOS Update for openswan CESA-2009:0402 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for openswan CESA-2009:0402 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Anonymous, LulzSec Dump 10 Gigs of Sensitive Law Enforcement Data

Hacker collectives, LulzSec and Anonymous claim to have compromised the servers of the Missouri Sheriff’s Association, posting some 10GB of sensitive data online. According to a statement posted online, the leaked information includes more than 300 email accounts from some 56 law enforcement...

Hacktivism: From Here to There

The current controversy regarding WikiLeaks and the attacks against the organizations that have opposed the group has sparked a large and complex conversation about the meanings of free speech, freedom of the press and online activism. As new as all of this may seem to some, this is by no means t...

Unreal Engine - ReceivedRawBunch() Denial of Service

Unreal Engine - ReceivedRawBunch Denial of Service source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games whic...

Unreal Engine - 'ReceivedRawBunch()' Denial of Service

source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games which are developed with Unreal Engine are affected:...

kernel: keyrings: find_keyring_by_name() can gain the freed keyring

Race condition in the findkeyringbyname function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via keyctl session commands that trigger access to a...

kernel: keyrings: find_keyring_by_name() can gain the freed keyring

Race condition in the findkeyringbyname function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via keyctl session commands that trigger access to a...

Sql injection

SQL injection vulnerability in player.php in Left 4 Dead L4D Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter...

CVE-2010-0980

SQL injection vulnerability in player.php in Left 4 Dead L4D Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter...

CVE-2010-0980

SQL injection vulnerability in player.php in Left 4 Dead L4D Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter...

CVE-2010-0980

The CVE-2010-0980 entry concerns Left 4 Dead (L4D) Stats 1.1. The vulnerability is a SQL injection in player.php that allows remote attackers to modify or exfiltrate data via the steamid parameter. This is supported by multiple sources (NVD entry and related references) which indicate arbitrary S...

CVE-2010-0980: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in player.php in Left 4 Dead L4D Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter...

Left 4 Dead Stats SQL Injection

---------------------------------- Left 4 Dead Stats SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Google Dork: "In your dreams, script kiddies." VULNERABILITY DESCRIPTION: Left 4 Dead Stats suffers from a remote SQL...

Left 4 Dead Stats 1.1 - SQL Injection

Left 4 Dead Stats 1.1 - SQL Injection ---------------------------------- Left 4 Dead Stats SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Google Dork: "In your dreams, script kiddies." VULNERABILITY DESCRIPTION: Left 4 De...

CVE-2008-7011: Undefined Security Weakness

The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service server exit via multiple file downloads from the server, which triggers an assertion...

openSUSE Security Update : strongswan (strongswan-676)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon CVE-2009-0790. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update strongswan-676. T...

Security fix for the ALT Linux 5 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...