Debian DSA-2374-1 : openswan - implementation error

The information security group at ETH Zurich discovered a denial of service vulnerability in the crypto helper handler of the IKE daemon pluto. More information can be found in the upstream advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Xoops 2.5.4 blind and fix-vulnerability warning-the black bar safety net

------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Download address: Author: blkhtc0rp www.badguest.cn blkhtc0rpatyahoodotcom Test platform: Freebsd 8 and Debian Squeeze Comment: In order to be successful an attacker must have...

Xoops 2.5.4 - Blind SQL Injection

------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Dork: "Powered by XOOPS 2.5.4" Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom Tested on: Freebsd 8 and Debian...

Xoops 2.5.4 - Blind SQL Injection

Xoops 2.5.4 - Blind SQL Injection ------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Dork: "Powered by XOOPS 2.5.4" Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom...

linux/x86 execve("/usr/bin/ftp", "sdf.lonestar.org", NULL) 73 bytes

/ 73 bytes sysexecve"/usr/bin/ftp", "sdf.lonestar.org", NULL polymorphic shellcode Tested On : Debian Squeeze 6.02 Linux x86-based OS Programmer : Paulus Gandung Prakosa 0x1337day Thanks to : mywisdom, chaer.newbie, wenkhairu, ketek, gunslinger, nofiafitri, xtr0nic, t3k0, tabun, petimati, and all...

Debian Security Advisory DSA 2263-1 (movabletype-opensource)

The remote host is missing an update to movabletype-opensource announced via advisory DSA 2263-1. OpenVAS Vulnerability Test $Id: deb22631.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2263-1 movabletype-opensource Authors: Thomas Reinke Copyright:...

[SECURITY] [DSA-2210-2] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2210-2 [email protected] http://www.debian.org/security/ Luciano Bello June 25, 2011 http://www.debian.org/security/faq -...

CVE-2011-0766

The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys...

Debian Security Advisory DSA 2192-1 (chromium-browser)

The remote host is missing an update to chromium-browser announced via advisory DSA 2192-1. OpenVAS Vulnerability Test $Id: deb21921.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2192-1 chromium-browser Authors: Thomas Reinke Copyright: Copyright c 2011...

Debian DSA-2175-1 : samba - missing input sanitising

Volker Lendecke discovered that missing range checks in Samba's file descriptor handling could lead to memory corruption, resulting in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (Linux)

This module exploits a stack-based buffer overflow in versions of ProFTPD server between versions 1.3.2rc3 and 1.3.3b. By sending data containing a large number of Telnet IAC commands, an attacker can corrupt memory and execute arbitrary code. The Debian Squeeze version of the exploit uses a litt...

[SECURITY] [DSA 2028-1] New xpdf packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA-2028-1 [email protected] http://www.debian.org/security/ Luciano Bello April 5th, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1884-1 [email protected] http://www.debian.org/security/ Nico Golde September 14th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1729-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 02, 2009 http://www.debian.org/security/faq -...