Cisco Nexus 1000V Insufficient VSM/VEM Authentication Vulnerability

A vulnerability in the Cisco Nexus 1000V could allow an unauthenticated, remote attacker to obtain control over a Virtual Ethernet Module VEM and associated port groups. The vulnerability is due to insufficient authentication between a VEM and a Virtual Supervisor Module VSM. An attacker could...

Security Advisory-HTTP Session Management Vulnerability in HTTP Module

Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Because HTTP session ID generation is weak and predictable, an attacker can...

Security Advisory-Buffer Overflow on Stack in HTTP Module

Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Attackers can make stack overflow by sending messages with the URI whose...

Security Advisory-Buffer Overflow on Heap When Parsing Http Response in HTTP Module

Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Attackers can make heap overflow by sending malformed HTTP Response message...

'Blitzableiter' Protects Against Flash Player Exploits

A German security researcher has released an open-source tool that analyses and cleans up Flash code before playback to prevent security holes in Adobe Flash Player from being exploited. The tool, called “Blitzableiter” lightning rod, is the brainchild of Felix “FX” Lindner, a well-known hacker w...

Cyrus IMSPD v1.7 abook_dbname Remote Root Exploit

No description provided by source. / Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner [email protected] Exploit coded by: SpikE [email protected] Exploitation techinique: As said by Felix Lindner, the bug lies in the "abookdbname" function. To caus...

Cyrus IMSPD 1.7 - 'abook_dbname' Remote Code Execution

/ Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner Exploit coded by: SpikE Exploitation techinique: As said by Felix Lindner, the bug lies in the "abookdbname" function. To cause the overrun, we must call this function with a long "name" variable. It can...