3795 matches found
Amazon Web Services Combing Third Parties for Credentials
Amazon Web Services is actively searching a number of sources, including code repositories and application stores, looking for exposed credentials that could put users’ accounts and services at risk. A week ago, a security consultant in Australia said that as many as 10,000 secret Amazon Web...
Apache CouchDB 1.5.0 - 'uuids' Denial of Service
Exploit Title: Couchdb uuids DOS exploit Google Dork inurl: uuids Date: 03/24/2014 Exploit Author: KrustyHack Vendor Homepage: http://couchdb.apache.org/ Software Link: http://couchdb.apache.org/ Version: up to 1.5.0 Tested on: Linux Couchdb up to 1.5.0 HOW TO ====== curl...
Fedora 19 : jansson-2.6-1.fc19 (2014-3782)
Florian Weimer of the Red Hat Product Security Team found that the hashing implementation in Jansson, a library for encoding, decoding and manipulating JSON data, was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause an application using Jansson to use an...
CVE-2013-7345
The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service CPU consumption via a crafted ASCII file that triggers a large amount of...
Fedora 20 : xen-4.3.2-1.fc20 (2014-2802)
update to xen-4.3.2 includes fix for 'Excessive time to disable caching with HVM guests with PCI passthrough', use-after-free in xccpupoolgetinfo under memory pressure Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
Linux Kernel (Ubuntu 11.10/12.04) - binfmt_script Stack Data Disclosure
Source: http://www.halfdog.net/Security/2012/LinuxKernelBinfmtScriptStackDataDisclosure/ Introduction Problem description: Linux kernel binfmtscript handling in combination with CONFIGMODULES can lead to disclosure of kernel stack data during execve via copy of data from dangling pointer to stack...
Improper Input Validation
actionpack/lib/actionview/lookupcontext.rb in Action View in Ruby on Rails allows remote attackers to cause a denial of service memory consumption via a header containing an invalid MIME type that leads to excessive caching...
CVE-2013-6414
actionpack/lib/actionview/lookupcontext.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service memory consumption via a header containing an invalid MIME type that leads to excessive caching...
RedHat Update for java-1.6.0-openjdk RHSA-2013:1505-01
Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.6.0-openjdk RHSA-2013:1505-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
RedHat Update for java-1.7.0-openjdk RHSA-2013:1447-01
Check for the Version of java-1.7.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.7.0-openjdk RHSA-2013:1447-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Vino VNC server DoS
Resources exhauston via connections...
Blue Coat ProxySG 5.x and Security Gateway OS - Denial of Service
source: https://www.securityfocus.com/bid/62647/info Blue Coat ProxySG and Security Gateway OS are prone to a denial-of-service vulnerability. Successful exploits may allow an attacker to consume excessive resources, denying service to legitimate users...
Blue Coat ProxySG 5.x and Security Gateway OS - Denial of Service
Blue Coat ProxySG 5.x and Security Gateway OS - Denial of Service source: https://www.securityfocus.com/bid/62647/info Blue Coat ProxySG and Security Gateway OS are prone to a denial-of-service vulnerability. Successful exploits may allow an attacker to consume excessive resources, denying servic...
Mandriva Linux Security Advisory : bzr (MDVSA-2013:229)
Updated bzr packages fix security vulnerabilities : A denial of service flaw was found in the way SSL module implementation of Python 3 performed matching of the certificate's name in the case it contained many '' wildcard characters. A remote attacker, able to obtain valid certificate with its...
[ MDVSA-2013:229 ] bzr
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:229 http://www.mandriva.com/en/support/security/ Package : bzr Date : September 10, 2013 Affected: Business Server 1.0 Problem Description: Updated bzr packages fix security vulnerabilities: A denial of...
Oracle Linux 6 : kernel (ELSA-2011-0836)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0836 advisory. - net dccp: handle invalid feature options length Jiri Pirko 703012 703013 CVE-2011-1770 - fs cifs: check for privatedata before trying to put it Jeff...
PT-2013-1399 · Red Hat · Red Hat
Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux RHEL 6 kernel package version 2.6.32-122.el6.x86 64 Description: The perf subsystem in the kernel does not properly handle Non-Maskable Interrupts NMIs, which could allow local users to cause a denial of service by...
Mandriva Linux Security Advisory : subversion (MDVSA-2013:153)
Multiple vulnerabilities has been found and corrected in subversion : Subversion's moddavsvn Apache HTTPD server module will use excessive amounts of memory when a large number of properties are set or deleted on a node. This can lead to a DoS. There are no known instances of this problem being...
RHEL 6 : subversion (RHSA-2013:0737)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0737 advisory. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarc...