UBUNTU-CVE-2013-3571

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service file descriptor consumption via multiple request that are refused based on the 1 sourceport, 2 lowport, 3 range, or 4...

CVE-2013-3571

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service file descriptor consumption via multiple request that are refused based on the 1 sourceport, 2 lowport, 3 range, or 4...

CVE-2013-3571: Undefined Security Weakness

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service file descriptor consumption via multiple request that are refused based on the 1 sourceport, 2 lowport, 3 range, or 4...

DEBIAN-CVE-2014-2673

The archduptaskstruct function in the Transactional Memory TM implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service Program...

CVE-2014-2673: Improper Input Validation

The archduptaskstruct function in the Transactional Memory TM implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service Program...

Updated stunnel package fixes security vulnerability

A flaw was found in the way stunnel, a socket wrapper which can provide SSL support to ordinary applications, performed reinitialization of PRNG after fork. When accepting a new connection, the server forks and the child process handles the request. The RANDbytes function of openssl doesn't reset...

CVE-2014-0016

stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator PRNG, which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC ECDSA or DSA...

CVE-2014-0016: Insufficient Entropy in PRNG

stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator PRNG, which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC ECDSA or DSA...

PT-2014-1912

Name of the Vulnerable Software and Affected Versions stunnel versions prior to 5.00 stunnel versions prior to 5.02 Description The issue is related to the improper update of the OpenSSL pseudo-random number generator PRNG state when using fork threading in stunnel. This causes subsequent childre...

Stunnel PRING初始化漏洞

Bugtraq ID:65964 CVE ID:CVE-2014-0016 Stunnel是一个自由的跨平台软件，用于提供全局的TLS / SSL 服务。 Stunnel存在安全漏洞，套接字封装程序可对普通应用程序提供SSL支持，在fork后执行PRNG初始化，当接受新连接时，服务器fork，子进程处理请求。OpenSSLRANDbytes函数在fork后没有重置其状态，而是简单的添加当前进程IDgetpid至PRNG状态，可导致使用EC ECDSA或DSA证书的服务器在某些情况下泄漏私钥。 0 Stunnel 目前没有详细解决方案提供： http://www.stunnel.org...

Fedora Update for python-setuptools FEDORA-2013-23141

Check for the Version of python-setuptools OpenVAS Vulnerability Test Fedora Update for python-setuptools FEDORA-2013-23141 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

[SECURITY] Fedora 19 Update: python-setuptools-0.6.49-1.fc19

Setuptools is a collection of enhancements to the Python distutils that all ow you to more easily build and distribute Python packages, especially ones th at have dependencies on other packages. This package contains the runtime components of setuptools, necessary to execute the software that...

CVE-2013-6801

Microsoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of service CPU consumption via a malformed .doc file containing an embedded image, as demonstrated by word2003forkbomb.doc, related to a "fork bomb" issue...

CVE-2013-6801

Microsoft Word 2003 SP2/SP3 on Windows XP SP3 is affected by CVE-2013-6801, enabling a denial-of-service due to a malformed .doc containing an embedded image. The issue, demonstrated with the word2003forkbomb.doc, causes CPU consumption when processing the crafted document. Details consistently r...

PT-2013-6117

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2003 SP2 and SP3 Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by using a malformed .doc file that contains an embedded image. This is related to a "fork bomb"...

CVE-2013-6801: Undefined Security Weakness

Microsoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of service CPU consumption via a malformed .doc file containing an embedded image, as demonstrated by word2003forkbomb.doc, related to a "fork bomb" issue...

Word 2003 SP2 .doc fork bomb on WinXP SP3

Exploit for windows platform in category dos / poc This is private exploit. You can buy it at https://0day.today...

PYSEC-2013-29

The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...

Android Zygote Socket Vulnerability Fork bomb Attack

Exploit for hardware platform in category dos / poc package it.ailab; import android.content.BroadcastReceiver; import android.content.Context; import android.content.Intent; import android.util.Log; public class BootReceiver extends BroadcastReceiver @Override public void onReceiveContext contex...

Android Zygote Socket Fork Bomb

BootReceiver.java / Android Application that performs the fork bomb attack http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3918 Further informations can be found at http://www.ai-lab.it/bugAndroid/bugAndroid.html @author Luca Verderame @version 1.0 Copyright 2012 Luca Verderame This file...