Nmap NSE net: http-form-brute

Performs brute force password auditing against http form-based authentication. SYNTAX: brute.unique: make sure that each password is only guessed once default: true http-form-brute.hostname: sets the host header in case of virtual hosting brute.retries: the number of times to retry if recoverable...

Nmap NSE net: afp-serverinfo

Shows AFP server information. This information includes the server's hostname, IPv4 and IPv6 addresses, and hardware type for example 'Macmini' or 'MacBookPro'. OpenVAS Vulnerability Test $Id: gbnmapafpserverinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors:...

dhclient: insufficient sanitization of certain DHCP response values

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to...

CVE-2011-0633

The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof...

CVE-2011-0633

The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof...

Debian Security Advisory DSA 2213-1 (x11-xserver-utils)

The remote host is missing an update to x11-xserver-utils announced via advisory DSA 2213-1. OpenVAS Vulnerability Test $Id: deb22131.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2213-1 x11-xserver-utils Authors: Thomas Reinke Copyright: Copyright c 2011...

SSL/TLS: Certificate - Subject Common Name Does Not Match Server FQDN

The SSL/TLS certificate contains a common name CN that does not match the hostname. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

kdelibs: SSL certificate for IP address accepted as valid for hosts that resolve to the IP

kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate...

Fedora 15 : xorg-x11-server-utils-7.5-5.fc15 (2011-4984)

fixes CVE-2011-0465 root hole via rogue hostname in xrdb Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

FreeBSD : xrdb -- root hole via rogue hostname (2eccb24f-61c0-11e0-b199-0015f2db7bde)

Matthias Hopf reports : By crafting hostnames with shell escape characters, arbitrary commands can be executed in a root environment when a display manager reads in the resource database via xrdb. These specially crafted hostnames can occur in two environments : Systems are affected are: systems...

Fedora 14 : xorg-x11-server-utils-7.5-5.fc14 (2011-4871)

Fixes CVE-2011-0465 root hole via rogue hostname xrdb Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2011-0996

dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...

CVE-2011-0996

dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...

CVE-2011-0996

The CVE-2011-0996 issue affects the dhcpcd DHCP client. A rogue DHCP server can supply a hostname containing shell metacharacters, enabling an attacker to trigger arbitrary command execution on the client. Public advisories describe this as impacting dhcpcd prior to version 5.2.12, with fixes imp...

CVE-2011-0996

dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...

CVE-2011-0996: Improper Input Validation

dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...

PT-2011-2803

Name of the Vulnerable Software and Affected Versions dhcpcd versions prior to 5.2.12 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message. Recommendations For versions prior to 5.2.12, update to version...

xorg: xrdb code execution via crafted X client hostname

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a 1 DHCP or 2 XDMCP message...

xorg: xrdb code execution via crafted X client hostname

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a 1 DHCP or 2 XDMCP message...

SuSE9 Security Update : dhcpcd (YOU Patch Number 12699)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note: this is a...