ZeroNights 2012, Москва 19-20 ноября

Привет всем, Попросили запостить от defcon-group. Цитата: Заявка на участие в конференции в качестве докладчика ZeroNights — международная конференция, посвященная техническим аспектам информационной безопасности. Главная цель конференции — распространение информации о новых методах атак, угрозах...

RealNetworks Helix Server SNMP Master Agent Open-PDU Denial of Service

A denial of service vulnerability has been reported in RealNetworks Helix server...

puppet -- multiple vulnerabilities

puppet -- multiple vulnerabilities Arbitrary file read on the puppet master from authenticated clients high. It is possible to construct an HTTP get request from an authenticated client with a valid certificate that will return the contents of an arbitrary file on the Puppet master that the maste...

puppet -- multiple vulnerabilities

puppet -- multiple vulnerabilities Arbitrary file read on the puppet master from authenticated clients high. It is possible to construct an HTTP get request from an authenticated client with a valid certificate that will return the contents of an arbitrary file on the Puppet master that the maste...

Audio Editor Master 5.4.1.217 Denial Of Service

!/usr/bin/python Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability software: Audio Editor Master version : 5.4.1.217 Tested on: Windows XP SP3 link: http://www.audioeditor.com Author: Onying @onyiing Blog: otakku-udang.blogspot.com from : Information Security Shinobi Ca...

Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability software: Audio Editor Master version : 5.4.1.217 Tested on: Windows XP SP3 link: http://www.audioeditor.com Author: Onying @onyiing Blog:...

Audio Editor Master 5.4.1.217 - Denial of Service

Audio Editor Master 5.4.1.217 - Denial of Service !/usr/bin/python Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability software: Audio Editor Master version : 5.4.1.217 Tested on: Windows XP SP3 link: http://www.audioeditor.com Author: Onying @onyiing Blog:...

Audio Editor Master 5.4.1.217 - Denial of Service

!/usr/bin/python Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability software: Audio Editor Master version : 5.4.1.217 Tested on: Windows XP SP3 link: http://www.audioeditor.com Author: Onying @onyiing Blog: otakku-udang.blogspot.com from : Information Security Shinobi Ca...

Secunia Research: Helix Server SNMP Master Agent Service Two Denial of Service Vulnerabilities

====================================================================== Secunia Research 09/04/2012 - RealNetworks Helix Server SNMP Master Agent - - Two Denial of Service Vulnerabilities - ====================================================================== Table of Contents Affected...

CVE-2012-2267

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service daemon crash by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1923...

CVE-2012-2268

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different...

CVE-2012-2267

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service daemon crash by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1923...

CVE-2012-2268

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different...

CVE-2012-2267

RealNetworks Helix Server and Helix Mobile Server 14.x (SNMP Master Agent) are affected by CVE-2012-2267, a denial-of-service vulnerability where a remote attacker can crash the daemon by opening and closing a TCP connection to port 705. This is described as a DoS caused by the SNMP Master Agent ...

CVE-2012-2268

CVE-2012-2268 affects RealNetworks Helix Server and Helix Mobile Server 14.x prior to 14.3.x. The vulnerability exists in the SNMP Master Agent’s handling of Open-PDU requests and improper DisplayString processing, which can be triggered remotely to cause a denial of service (unhandled exception ...

CVE-2012-2268: Improper Input Validation

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different...

PT-2012-3908

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server and Helix Mobile Server versions 14.x before 14.3.x Description The issue is related to the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server, where a crafted Open-PDU request can cause a denial o...

CVE-2012-2267: Undefined Security Weakness

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service daemon crash by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1923...

RealNetworks Helix Server 14.x < 14.3.x Multiple Vulnerabilities

According to its banner, the remote host is running version 14.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are potentially affected by multiple vulnerabilities : - Administrative and user credentials are insecurely stored in a flat file database. This file may be accessed ...

Puppet: Multiple vulnerabilities

Background Puppet is a system configuration management tool written in Ruby. Description Multiple vulnerabilities have been discovered in Puppet. Please review the CVE identifiers referenced below for details. Impact A local attacker could gain elevated privileges, or access and modify arbitrary...