Debian Security Advisory DSA 2619-1 (xen-qemu-dm-4.0 - buffer overflow)

A buffer overflow was found in the e1000 emulation, which could be triggered when processing jumbo frames. OpenVAS Vulnerability Test $Id: deb2619.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2619-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks...

Debian Security Advisory DSA 2618-1 (ircd-hybrid - denial of service)

Bob Nomnomnom reported a Denial of Service vulnerability in IRCD-Hybrid, an Internet Relay Chat server. A remote attacker may use an error in the masks validation and crash the server. OpenVAS Vulnerability Test $Id: deb2618.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory D...

Debian Security Advisory DSA 2616-1 (nagios3 - buffer overflow in CGI scripts)

A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A malicious client could craft a request to history.cgi and cause application crashes. OpenVAS Vulnerability Test $Id: deb2616.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated fro...

Debian Security Advisory DSA 2615-1 (libupnp4 - several vulnerabilities)

Multiple stack-based buffer overflows were discovered in libupnp4, a library used for handling the Universal Plug and Play protocol. HD Moore from Rapid7 discovered that SSDP queries where not correctly handled by the uniqueservicename function. An attacker sending carefully crafted SSDP queries ...

Debian Security Advisory DSA 2614-1 (libupnp - several vulnerabilities)

Multiple stack-based buffer overflows were discovered in libupnp, a library used for handling the Universal Plug and Play protocol. HD Moore from Rapid7 discovered that SSDP queries where not correctly handled by the uniqueservicename function. An attacker sending carefully crafted SSDP queries t...

Debian Security Advisory DSA 2613-1 (rails - insufficient input validation)

Lawrence Pit discovered that Ruby on Rails, a web development framework, is vulnerable to a flaw in the parsing of JSON to YAML. Using a specially crafted payload attackers can trick the backend into decoding a subset of YAML. The vulnerability has been addressed by removing the YAML backend and...

Debian Security Advisory DSA 2611-1 (movabletype-opensource - several vulnerabilities)

An input sanitation problem has been found in upgrade functions of movabletype-opensource, a web-based publishing platform. Using carefully crafted requests to the mt-upgrade.cgi file, it would be possible to inject OS command and SQL queries. OpenVAS Vulnerability Test $Id: deb2611.nasl 6611...

Debian Security Advisory DSA 2610-1 (ganglia - arbitrary script execution)

Insufficient input sanitization in Ganglia, a web based monitoring system, could lead to remote PHP script execution with permissions of the user running the web server. OpenVAS Vulnerability Test $Id: deb2610.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2610-1 using...

Debian Security Advisory DSA 2605-2 (asterisk - several issues)

Several vulnerabilities were discovered in Asterisk, a PBX and telephony toolkit, that allow remote attackers to perform denial of service attacks. OpenVAS Vulnerability Test $Id: deb2605.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2605-2 using nvtgen 1.0 Script...

Debian Security Advisory DSA 2609-1 (rails - SQL query manipulation)

An interpretation conflict can cause the Active Record component of Rails, a web framework for the Ruby programming language, to truncate queries in unexpected ways. This may allow attackers to elevate their privileges. OpenVAS Vulnerability Test $Id: deb2609.nasl 6611 2017-07-07 12:07:20Z cfisch...

Debian Security Advisory DSA 2608-1 (qemu - buffer overflow)

It was discovered that the e1000 emulation code in QEMU does not enforce frame size limits in the same way as the real hardware does. This could trigger buffer overflows in the guest operating system driver for that network card, assuming that the host system does not discard such frames which it...

Debian Security Advisory DSA 2606-1 (proftpd-dfsg - symlink race)

It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. OpenVAS Vulnerability Test $Id: deb2606.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generate...

Debian Security Advisory DSA 2603-1 (emacs23 - programming error)

Paul Ling discovered that Emacs insufficiently restricted the evaluation of Lisp code if enable-local-variables is set to safe . OpenVAS Vulnerability Test $Id: deb2603.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2603-1 using nvtgen 1.0 Script version: 1.0 Author:...

Debian Security Advisory DSA 2602-1 (zendframework - XML external entity inclusion)

Yury Dyachenko discovered that Zend Framework uses the PHP XML parser in an insecure way, allowing attackers to open files and trigger HTTP requests, potentially accessing restricted information. OpenVAS Vulnerability Test $Id: deb2602.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from...

Debian Security Advisory DSA 2599-1 (nss - mis-issued intermediates)

Google, Inc. discovered that the TurkTrust certification authority included in the Network Security Service libraries nss mis-issued two intermediate CAs which could be used to generate rogue end-entity certificates. This update explicitly distrusts those two intermediate CAs. The two existing...

Debian Security Advisory DSA 2601-1 (gnupg, gnupg2 - missing input sanitation)

KB Sriram discovered that GnuPG, the GNU Privacy Guard did not sufficiently sanitise public keys on import, which could lead to memory and keyring corruption. The problem affects both version 1, in the gnupg package, and version two, in the gnupg2 package. OpenVAS Vulnerability Test $Id:...

Debian Security Advisory DSA 2598-1 (weechat - several vulnerabilities)

Two security issues have been discovered in WeeChat, a fast, light and extensible chat client: CVE-2011-1428 X.509 certificates were incorrectly validated. CVE-2012-5534 The hookprocess function in the plugin API allowed the execution of arbitrary shell commands. OpenVAS Vulnerability Test $Id:...

Debian Security Advisory DSA 2597-1 (rails - input validation error)

joernchen of Phenoelit discovered that rails, an MVC ruby based framework geared for web application development, is not properly treating user-supplied input to findby methods. Depending on how the ruby on rails application is using these methods, this allows an attacker to perform SQL injection...

lighttpd 1.4.31 - Denial of Service (PoC)

!/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested on: Debian Linux, Gentoo Linux, Arch...

lighttpd 1.4.31 - Denial of Service (PoC)

lighttpd 1.4.31 - Denial of Service PoC !/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested...