141 matches found
IDnow Online Ident - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application IDnow Online Ident published at the 'play' market has multiple vulnerabilities...
UBUNTU-CVE-2014-7207
A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6selectident function calls, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging 1 tun or 2 macvtap devic...
Linux Kernel < 2.6.26.4 - SCTP Kernel Memory Disclosure Exploit
No description provided by source. / cve-2008-4113.c Linux Kernel 2.6.26.4 SCTP kernel memory disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113 The sctpgetsockopthmacident function in net/sctp/socket.c in t...
ngIRCd <= 0.8.2 - Remote Format String Exploit
No description provided by source. / ngircdfsexp.c ngIRCd = 0.8.2 remote format string exploit Note: To obtain a successful exploitation, we need that ngIRCd has been compiled with IDENT, logging to SYSLOG and DEBUG enabled. Original Reference: http://www.nosystem.com.ar/advisories/advisory-11.tx...
GNU Anubis 3.6.x/3.9.x auth.c auth_ident() Function Overflow
No description provided by source. source: http://www.securityfocus.com/bid/9772/info GNU Anubis has been reported prone to multiple buffer overflow and format string vulnerabilities. It has been conjectured that a remote attacker may potentially exploit these vulnerabilities to have arbitrary co...
Sendmail 8.6.9 IDENT Remote root Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2311/info A vulnerability in the IDENT function of sendmail 8.6.9 allows attackers to obtain remote root access. Very little other information on this vulnerability is currently available; this is an old vulnerability. it...
OpenSSH/PAM <= 3.6.1p1 Remote Users Ident (gossh.sh)
No description provided by source. !/bin/sh OpenSSH = 3.6.p1 - User Identification. Nicolas Couture - [email protected] Description: -Tells you wether or not a user exist on a distant server running OpenSSH. Usage: -You NEED to have the host's public key before executing this script...
DEBIAN-CVE-2013-1049
Buffer overflow in the RFC1413 ident client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service crash and possibly execute arbitrary code via a crafted response...
Buffer overflow
Buffer overflow in the RFC1413 ident client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service crash and possibly execute arbitrary code via a crafted response...
CVE-2013-1049
Buffer overflow in the RFC1413 ident client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service crash and possibly execute arbitrary code via a crafted response...
CVE-2013-1049
CVE-2013-1049 affects the cfingerd RFC1413 ident client. The issue is a remote-exploitable buffer overflow in the ident handling of cfingerd 1.4.3-3, which can cause a crash and may allow arbitrary code execution via a crafted response. Debian notes the vulnerability as remote and fixed it in 1.4...
CVE-2013-1049
Buffer overflow in the RFC1413 ident client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service crash and possibly execute arbitrary code via a crafted response...
CVE-2013-1049
Buffer overflow in the RFC1413 ident client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service crash and possibly execute arbitrary code via a crafted response...
OpenSSH < 1.2.2 sshd Local TCP Redirection Connection Masking Weakness
According to its banner, the version of OpenSSH running on the remote host allows local users without shell access to redirect TCP connections with the IDENT 'root@localhost'. A local attacker could use this incorrect IDENT to bypass monitoring/logging. C Tenable, Inc. include"compat.inc"; if...
CVE-2009-4497
Cross-site scripting XSS vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program...
Cross site scripting
Cross-site scripting XSS vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program...
CVE-2009-4497
The CVE-2009-4497 entry is grounded in LXR Cross Referencer (lxr-cvs) web frontend, where Debian and OpenVAS/NVL references confirm a vulnerability caused by missing input sanitization. The issue enables cross-site scripting (XSS) via crafted input and affects lxr-cvs versions around 0.9.5/0.9.6 ...
Mandriva Update for imap MDKA-2007:083 (imap)
Check for the Version of imap OpenVAS Vulnerability Test Mandriva Update for imap MDKA-2007:083 imap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Mandriva Update for imap MDKA-2007:083 (imap)
Check for the Version of imap OpenVAS Vulnerability Test Mandriva Update for imap MDKA-2007:083 imap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Check for ident Service
The remote host is running an ident daemon. The Ident Protocol is designed to work as a server daemon, on a user SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...