Vulnerability in OpenSSL - Information leak in pretty printing functions

A flaw in OBJobj2txt may cause pretty printing functions such as X509nameoneline, X509nameprintex, to leak some information from the stack. Applications may be affected if they echo pretty printing output to the attacker. OpenSSL SSL/TLS clients and servers themselves are not affected...

SLMail 5.5 - Remote Buffer Overflow Exploit

No description provided by source. / SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov ????-????? ???????????????? 31337 Team / include string.h include stdio.h include winsock2.h include windows.h // bind 4444 unsigned char shellcode = \xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x...

Linux x86 - execve /bin/sh - 21 bytes

No description provided by source. / execve /bin/sh - x86/linux - 21 bytes . zeroed argv / envp [email protected] [email protected] thanks : ivan, milo, oldschool crew / int main char sc = \x6a\x0b // push byte +0xb \x58 // pop eax \x99 // cdq \x52 // push edx...

Vulnerability in OpenSSL - Anonymous ECDH denial of service

OpenSSL TLS clients enabling anonymous ECDH ciphersuites are subject to a denial of service attack...

Ubuntu Update for libyaml-libyaml-perl USN-2161-1

Check for the Version of libyaml-libyaml-perl OpenVAS Vulnerability Test $Id: gbubuntuUSN21611.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for libyaml-libyaml-perl USN-2161-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Ubuntu 12.04 LTS / 12.10 / 13.10 : libyaml vulnerability (USN-2160-1)

Ivan Fratric discovered that LibYAML incorrectly handled certain malformed YAML documents. An attacker could use this issue to cause LibYAML to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description...

Ubuntu 12.04 LTS / 12.10 / 13.10 : libyaml-libyaml-perl vulnerabilities (USN-2161-1)

Florian Weimer discovered that libyaml-libyaml-perl incorrectly handled certain large YAML documents. An attacker could use this issue to cause libyaml-libyaml-perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2013-6393 Ivan Fratric discovered that...

Important: Red Hat Security Advisory: ruby193-libyaml security update

Updated ruby193-libyaml packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 3.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give...

USN-2161-1: libyaml-libyaml-perl vulnerabilities

Florian Weimer discovered that libyaml-libyaml-perl incorrectly handled certain large YAML documents. An attacker could use this issue to cause libyaml-libyaml-perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2013-6393 Ivan Fratric discovered that...

[Suricata 1.4.7] Open Source Next Generation Intrusion Detection and Prevention Engine

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of...

Updated nginx packages fix CVE-2013-4547

Updated nginx package fixes security vulnerability: Ivan Fratric of the Google Security Team discovered a bug in nginx, which might allow an attacker to bypass security restrictions in certain configurations by using a specially crafted request, or might have potential other impact CVE-2013-4547...

MGASA-2013-0349 Updated nginx packages fix CVE-2013-4547

Updated nginx package fixes security vulnerability: Ivan Fratric of the Google Security Team discovered a bug in nginx, which might allow an attacker to bypass security restrictions in certain configurations by using a specially crafted request, or might have potential other impact CVE-2013-4547...

Debian Patches Flaws in Nginx, Perl Module

Debian has released patches for a pair of security vulnerabilities in the free operating system, including a security bypass flaw in the Nginx Web server. The other vulnerability lies in a Perl module used in the OS. The vulnerability in the HTTP: :Body Perl module could allow an attacker to run...

nginx -- Request line parsing vulnerability

The nginx project reports: Ivan Fratric of the Google Security Team discovered a bug in nginx, which might allow an attacker to bypass security restrictions in certain configurations by using a specially crafted request, or might have potential other impact CVE-2013-4547...

kernel security and bug fix update

kernel 2.6.18-348.18.1 - net be2net: enable polling prior enabling interrupts globally Ivan Vecera 1005239 987539 - kernel signals: stop info leak via tkill and tgkill syscalls Oleg Nesterov 970874 970875 CVE-2013-2141 - net ipv6: do udppushpendingframes AFINET sock pending data Jiri Benc 987647...

Security fix for the ALT Linux 8 package krb5 version 1.11.2-alt2

May 14, 2013 Ivan A. Melnikov 1.11.2-alt2 - add patch 23 from upstream git to fix kpasswd udp ping-pong CVE-2002-2443...

Security fix for the ALT Linux 7 package krb5 version 1.11.2-alt2

May 14, 2013 Ivan A. Melnikov 1.11.2-alt2 - add patch 23 from upstream git to fix kpasswd udp ping-pong CVE-2002-2443...

Security fix for the ALT Linux 7 package krb5 version 1.11.1-alt1

March 30, 2013 Ivan A. Melnikov 1.11.1-alt1 - 1.11.1 + fix a null pointer dereference in the KDC PKINIT code CVE-2013-1415; - drop obsolete patch 21; - add patch 22 from upstream git to fix a memory leak in krb5getinitcredskeytab upstream ticket 7586...

Adult Webmaster Script Password Disclosure

Exploit Title: Yagina.com Adult Webmaster Script Admin Password Disclosure Category:webapps Description software : software website for webmasters promoting adult companies through referrals Date: 21-1-2013 Exploit Author: Dshellnoi Unix Vendor Homepage: http://www.yagina.com/ Software Link:...

ZDI-12-181 : Novell iPrint nipplib.dll client-file-name Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-181 : Novell iPrint nipplib.dll client-file-name Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-181 August 29, 2012 - -- CVE ID: CVE-2011-4186 - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affect...