1857 matches found
CVE-2020-26887
CVE-2020-26887 affects FRITZ!Box devices running FRITZ!OS 7.20 and earlier. The issue is a DNS Rebinding protection bypass in FRITZ!Box DNS processing, allowing DNS responses that could reach local network IPs to bypass protection. Affected product: FRITZ!Box (examples include 7490; may include o...
Scientific Linux Security Update : cups on SL7.x x86_64 (20201001)
Security Fixes : - cups: DNS rebinding attacks via incorrect whitelist CVE-2017-18190 - cups: stack-buffer-overflow in libcups's asn1gettype function CVE-2019-8675 - cups: stack-buffer-overflow in libcups's asn1getpacked function CVE-2019-8696 C Tenable Network Security, Inc. The descriptive text...
cups security update
CentOS Errata and Security Advisory CESA-2020:3864 An update for cups is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
AVM FRITZ!Box DNS Rebinding Protection Bypass (CVE-2020-26887)
Multiple AVM FRITZ!Box devices are prone to a DNS rebinding protection bypass. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
AVM Fritz!Box Security Bypass Vulnerability
The AVM Fritz!Box is a wireless router from the German company AVM. A security vulnerability exists in FRITZ!Box version 7.20 and prior versions, which stems from suffering a DNS rebinding protection bypass vulnerability. No detailed vulnerability details are currently available...
CentOS 7 : cups (RHSA-2020:3864)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3864 advisory. - A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP...
CVE-2020-24375
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
CVE-2020-24375
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
Design/Logic Flaw
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
CVE-2020-24375
The CVE describes a DNS rebinding vulnerability in the UPnP MediaServer implementation of Freebox Server prior to version 4.2.3. The affected component is Freebox Server’s UPnP MediaServer; the underlying issue is DNS rebinding that could allow an attacker on the local network to access internal ...
CVE-2020-24375
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
FRITZ!Box 7.20 DNS Rebinding Protection Bypass
Advisory: FRITZ!Box DNS Rebinding Protection Bypass RedTeam Pentesting discovered a vulnerability in FRITZ!Box router devices which allows to resolve DNS answers that point to IP addresses in the private local network, despite the DNS rebinding protection mechanism. Details ======= Product:...
Oracle Linux 7 : cups (ELSA-2020-3864)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3864 advisory. - 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist rhel-7 - 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcupss...
cups security and bug fix update
1:1.6.3-51 - 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist rhel-7 1:1.6.3-50 - 1813413 - RHEL 7.7 segfault in cupsdSaveJob caused by no space in /var 1:1.6.3-49 - more covscan issues raised from the fix 1672212 1:1.6.3-48 - fixing covscan issue from 1672212 1:1.6.3-...
cups: DNS rebinding attacks via incorrect whitelist
A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS serve...
Moderate: Red Hat Security Advisory: cups security and bug fix update
An update for cups is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
SRC-2022-0004 : Microsoft SharePoint Server SPWebRequest SafeCreate TOCTOU DNS Rebinding Security Feature Bypass Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to disclose bypass access IP restrictions on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the SPWebRequest SafeCreate API. The issu...
CVE-2020-24377
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...