Updated pam package fixes security vulnerability

If SELinux is enabled, the unixrunhelperbinary function in Linux-PAM 1.1.8 and earlier hangs indefinitely when verifying a password of 65536 characters, which allows attackers to conduct username enumeration and denial of service attacks CVE-2015-3238...

USN-2639-1: OpenSSL vulnerabilities

Praveen Kariyanahalli, Ivan Fratric and Felix Groebert discovered that OpenSSL incorrectly handled memory when buffering DTLS data. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2014-8176 Joseph...

SuSE 11.3 Security Update : krb5 (SAT Patch Number 10282)

krb5 has been updated to fix four security issues : - gssprocesscontexttoken incorrectly frees context bsc912002. CVE-2014-5352 - kadmind doubly frees partial deserialization results bsc912002. CVE-2014-9421 - kadmind incorrectly validates server principal name bsc912002. CVE-2014-9422 - libgssrp...

Amazon Linux AMI : httpd24 (ALAS-2014-389)

A race condition flaw, leading to heap-based buffer overflows, was found in the modstatus httpd module. A remote attacker able to access a status page served by modstatus on a server using a threaded Multi-Processing Module MPM could send a specially crafted request that would cause the httpd chi...

DSA-2989-1 apache2 - security update

Bulletin has no description...

CesarFTP 0.99 g Remote CWD Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7950/info A vulnerability has been reported for CesarFTP. Reportedly, an attacker may crash a target server by supplying excessive data as the argument to the 'CWD' command. This may result in the server hanging,...

Cogent DataHub Command Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Cogent DataHub Command Injection', 'Description' = %q This module exploits an injection vulnerability in Cogent DataHub prior to 7.3....

VxWorks 5.5 through 6.9 Multiple Vulnerabilities

According to its self-reported version, the remote VxWorks device is version 5.5 through 6.9. It therefore is potentially affected by the following vulnerabilities : - An attacker can cause SSH access to be unavailable until the next reboot with a specially crafted requests. CVE-2013-0711 /...

Fedora 18 : icedtea-web-1.3.2-0.fc18 (2013-5962)

New in release 1.3.2 2013-04-17 : - Security Updates - CVE-2013-1927, RH884705: fixed gifar vulnerability - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common - Added new option in itw-settings which allows users to set JVM arguments when plugin...

Mandriva Update for bind MDVSA-2012:162 (bind)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Scientific Linux Security Update : lftp on SL5.x i386/x86_64

CVE-2007-2348 lftp mirror --script does not escape names and targets of symbolic links It was discovered that lftp did not properly escape shell metacharacters when generating shell scripts using the 'mirror --script' command. A mirroring script generated to download files from a malicious FTP...

Flash 0day Exploit Analysis-exploit warning-the black bar safety net

The number of days before the network broke to take advantage of the latest“Flash Media loophole”hanging horse attack page, this vulnerability affects Adobe Flash Player 10.3.183.5 the following version, you want to know on this Wednesday before 1 0. 3. 1 8 3. 5 is flash highest version, even if...

Fedora Core 11 FEDORA-2009-10639 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-10639. OpenVAS Vulnerability Test $Id: fcore200910639.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10639 kernel Authors: Thomas Reinke Copyright: Copyright c 2009...

On applet hang horse a little research-vulnerability warning-the black bar safety net

Reprint please indicate the source: a lone water around the city For hanging horse we certainly are not unfamiliar, on how to cross-site how to hang horse stuff is no longer what advanced technology, even a rookie one can also play very skilled, does not require very advanced technology, for...

DoS in multiple browsers

Hang or crash on oversized location.hash...

Net horse to decrypt the primary papers-the vulnerability warning-the black bar safety net

Nets horse decryption of the primary article A. Web hang horse concept: Web hang horse means: access to the web or the web server part or all of the permissions in the page file insert a piece of malicious code, these malicious codes are mainly including IE exploit code, The user access is hung i...

CentOS Update for kernel CESA-2007:1049 centos3 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2007:1049 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

IE7 0DAY exploit code has been in hanging horse attack by using vulnerability warning-the black bar safety net

Source: know security In view of the vulnerability of the risk, as the United States of Microsoft in the domestic security service provider, we have the first announcement and the analysis of the vulnerability details and submit it to the United States, Microsoft the relevant departments, there i...

Baidu home break hung it to the vulnerability-vulnerability warning-the black bar safety net

By: eggplant treasure ps: direct browser access, as far as hanging horse? Yourself to play it. http://www.baidu.com/index.php?bar="//style=xss:expressionwindow. r!= 1? eval'window. r=1;evalunescapelocation. hash. substr1':1;alert%2 8 1 2 1 2 1 2% 2 9...

libxml DoS

Hanging on XML parsing...