GLSA-201311-04 : Vixie cron: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201311-04 Vixie cron: Denial of Service Vixie cron contains a race condition relating to atime and mtime values of temporary files. Impact : A local attacker could change the modification time of files, possibly resulting in a...

GLSA-201310-20 : acpid2: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201310-20 acpid2: Privilege escalation acpid2 does not properly use the pidof program in powerbtn.sh. Impact : A local attacker could gain escalated privileges. Workaround : There is no known workaround at this time. %NASLMINLEVEL...

Oracle Java SE CVE-2013-5838 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component. This vulnerability affects the following supported versions: Java SE 7u25, Java SE Embedded 7u25 Technologies...

GLSA-201310-09 : Setuptools: Man-in-the-Middle attack

The remote host is affected by the vulnerability described in GLSA-201310-09 Setuptools: Man-in-the-Middle attack Setuptools does not check the integrity of downloaded Python packages. Impact : A remote attacker could perform man-in-the-middle attacks to execute arbitrary code with the privileges...

GLSA-201310-02 : isync: Man-in-the-Middle attack

The remote host is affected by the vulnerability described in GLSA-201310-02 isync: Man-in-the-Middle attack isync does not properly verify the servers hostname against the CN field in the SSL certificate. Impact : A remote server could perform man-in-the-middle attacks to disclose passwords or...

PT-2013-1253 · Gentoo Linux · Strongswan

Name of the Vulnerable Software and Affected Versions: strongswan versions prior to 5.1.0 Description: The issue affects the strongswan package in Gentoo Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. Exploitation of the...

Oracle Java SE CVE-2013-1488 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current process. Technologies Affected Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager Utility...

Oracle Java SE CVE-2013-0431 Remote Java Runtime Environment Vulnerability

Description Oracle Java SE is prone to a remote vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'JMX' sub-component. This vulnerability affects the following supported versions: 7 Update 11 and prior Note: This issue wa...

GLSA-201301-04 : dhcpcd: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201301-04 dhcpcd: Arbitrary code execution A vulnerability has been discovered in dhcpcd. Please review the CVE identifier referenced below for details. Impact : The vulnerability might allow an attacker to execute arbitrary code ...

GLSA-201301-06 : ISC DHCP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201301-06 ISC DHCP: Denial of Service Multiple vulnerabilities have been discovered in ISC DHCP. Please review the CVE identifiers referenced below for details. Impact : The vulnerabilities might allow remote attackers to execute...

Adobe Acrobat and Reader CVE-2013-0604 Remote Heap Based Buffer Overflow Vulnerability

Description Adobe Acrobat and Reader are prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions. Note...

lighttpd 1.4.31 - Denial of Service (PoC)

!/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested on: Debian Linux, Gentoo Linux, Arch...

lighttpd 1.4.31 - Denial of Service (PoC)

lighttpd 1.4.31 - Denial of Service PoC !/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested...

GLSA-201210-01 : w3m: SSL spoofing vulnerability

The remote host is affected by the vulnerability described in GLSA-201210-01 w3m: SSL spoofing vulnerability A SSL spoofing vulnerability has been discovered in w3m. Please review the CVE identifier referenced below for details. Impact : A remote attacker might employ a specially crafted...

GLSA-201210-03 : rdesktop: Directory Traversal

The remote host is affected by the vulnerability described in GLSA-201210-03 rdesktop: Directory Traversal A vulnerability has been discovered in rdesktop. Please review the CVE identifier referenced below for details. Impact : Remote RDP servers may be able to read or overwrite arbitrary files v...

GLSA-201209-09 : Atheme IRC Services: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201209-09 Atheme IRC Services: Denial of Service The myuserdelete function in account.c does not properly remove CertFP entries when deleting user accounts. Impact : A remote authenticated attacker may be able to cause a Denial of...

PT-2012-1164 · Openjpeg +4 · Openjpeg +4

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 1.5.1 Gentoo Linux affected versions not specified Description: The issue concerns multiple vulnerabilities in the OpenJPEG package that can be exploited remotely, potentially leading to breaches of confidentiality,...

GLSA-201208-01 : socat: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201208-01 socat: Arbitrary code execution A vulnerability in the 'xioscanreadline' function in xio-readline.c could cause a heap-based buffer overflow. Impact : A remote attacker could possibly execute arbitrary code with the...

Adobe Flash Player CVE-2012-1535 Remote Code Execution Vulnerability

Description Adobe Flash Player is prone to an unspecified remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Adob...

GLSA-201207-05 : pidgin-otr: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201207-05 pidgin-otr: Arbitrary code execution A format string vulnerability has been found in the 'logmessagecb' function in otr-plugin.c. Impact : A remote attacker could possibly execute arbitrary code with the privileges of th...