PwnPi - A Pen Test Drop Box distro for the Raspberry Pi

PwnPi is a Linux-based penetration testing dropbox distribution for the Raspberry Pi. It currently has 200+ network security tools pre-installed to aid the penetration tester. It is built a stripped down version of the Debian Wheezy image from the Raspberry Pi foundation's website and uses Openbo...

Mandriva Linux Security Advisory : iodine (MDVSA-2014:128)

Updated iodine packages fix security vulnerability : Oscar Reparaz discovered an authentication bypass vulnerability in iodine, a tool for tunneling IPv4 data through a DNS server. A remote attacker could provoke a server to accept the rest of the setup or also network traffic by exploiting this...

DEBIAN-CVE-2014-4168

1 iodined.c and 2 user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering...

CVE-2014-4168

1 iodined.c and 2 user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering...

CVE-2014-4168

1 iodined.c and 2 user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering...

Authentication flaw

1 iodined.c and 2 user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering...

CVE-2014-4168

1 iodined.c and 2 user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering...

CVE-2014-4168

1 iodined.c and 2 user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering...

CVE-2014-4168

CVE-2014-4168 affects iodine up to 0.7.0. The flaw in the code paths (iodined.c and user.c) allows a remote attacker to bypass authentication by continuing execution after an error. The vulnerability is network-exploitable and has a CVSS v2 base score of 5.0 (Medium). Remediation is to upgrade to...

CVE-2014-4168

1 iodined.c and 2 user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering...

MGASA-2014-0277 Updated iodine packages fix CVE-2014-4168

Updated iodine packages fix security vulnerability: Oscar Reparaz discovered an authentication bypass vulnerability in iodine, a tool for tunneling IPv4 data through a DNS server. A remote attacker could provoke a server to accept the rest of the setup or also network traffic by exploiting this...

Updated iodine packages fix CVE-2014-4168

Updated iodine packages fix security vulnerability: Oscar Reparaz discovered an authentication bypass vulnerability in iodine, a tool for tunneling IPv4 data through a DNS server. A remote attacker could provoke a server to accept the rest of the setup or also network traffic by exploiting this...

iodine authentication bypass

reverse tunneling is possible...

[oss-security] CVE Request: iodine: authentication bypass by client

Hi oss-security, iodine 0.7.0 has just been released, which fixes an authentication bypass issue discovered by Oscar Reparaz. The fix is here: https://github.com/yarrick/iodine/commit/b715be5cf3978fbe589b03b09c9398d0d791f850 and the new release is available at the homepage:...

Debian DSA-2964-1 : iodine - security update

Oscar Reparaz discovered an authentication bypass vulnerability in iodine, a tool for tunneling IPv4 data through a DNS server. A remote attacker could provoke a server to accept the rest of the setup or also network traffic by exploiting this flaw. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 2964-1] iodine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2964-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2964-1] iodine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2964-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 21, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2964-1 (iodine - security update)

Oscar Reparaz discovered an authentication bypass vulnerability in iodine, a tool for tunneling IPv4 data through a DNS server. A remote attacker could provoke a server to accept the rest of the setup or also network traffic by exploiting this flaw. OpenVAS Vulnerability Test $Id: deb2964.nasl 67...

DSA-2964-1 iodine - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2964-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...