Facebook Session Sidejacking

Recently, there was a vulnerability discovered in LinkedIn, which is described here http://www.wtfuzz.com/blogs/linkedin-ssl-cookie-vulnerability/ Basically, this allows someone in network to sniff a cookie value and apply it in his browses session to hijack the target's user session. This simple...

DNS Spoofing - Man in the Middle (Basic Attack)

Document Title: =============== DNS Spoofing - Man in the Middle Basic Attack References: =========== Download: http://www.vulnerability-lab.com/resources/videos/16.wmv View: http://www.youtube.com/watch?v=9HWvUgSk0Y Release Date: ============= 2011-06-12 Vulnerability Laboratory ID VL-ID:...

Gadu-Gadu Remote Code Execution

Vendor: Gadu-Gadu http://gadu-gadu.pl Vulnerable Version: All Vulnerability Type: MITM, Remote Code Execution Risk level: High Credit: Kacper Szczesniak Vulnerability Details: Gadu-Gadu is vulnerable to the Man-In-The-Middle attack allowing remote code execution on a victim host. JavaScript code ...

CVE-2011-0633

The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof...

CVE-2011-0633

The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof...

CVE-2011-0633

CVE-2011-0633 affects libwww-perl’s Net::HTTPS usage (prior to 6.00) as used by WWW::Mechanize and LWP::UserAgent. When environments do not set the If-SSL-Cert-Subject header, full SSL certificate validation is not enabled by default, enabling MITM-style spoofing via hostnames that are not proper...

PT-2011-2511

Name of the Vulnerable Software and Affected Versions libwww-perl LWP versions prior to 6.00 Description The issue allows remote attackers to conduct man-in-the-middle MITM attacks by spoofing servers due to inadequate validation of SSL certificates when the If-SSL-Cert-Subject header is not set...

CVE-2011-0633: Improper Input Validation

The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0957-1)

Icedtea included in java-160-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues : - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition - S6891766, CVE-2010-3554: OpenJDK corba reflecti...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0957-1)

Icedtea included in java-160-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues : - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition - S6891766, CVE-2010-3554: OpenJDK corba reflecti...

USN-1106-1: NSS vulnerabilities

It was discovered that several invalid HTTPS certificates were issued and revoked. An attacker could exploit these to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications. These certificates were marked as explicitly not trusted to prevent their...

PT-2011-3123

Name of the Vulnerable Software and Affected Versions Wee Enhanced Environment for Chat aka WeeChat versions 0.3.4 and earlier Description The issue arises from improper verification that the server hostname matches the domain name of the subject of an X.509 certificate. This allows...

Ubuntu: Security Advisory (USN-1067-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 9.10 / 10.04 LTS / 10.10 : telepathy-gabble vulnerability (USN-1067-1)

It was discovered that Gabble did not verify the from field of google jingleinfo updates. This could allow a remote attacker to perform man in the middle attacks MITM on streamed media. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

CVE-2011-0738

MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the 1 hostname or 2 identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle MITM attacks via a crafted certificate whe...

Design/Logic Flaw

MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the 1 hostname or 2 identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle MITM attacks via a crafted certificate whe...

PT-2011-2599

Name of the Vulnerable Software and Affected Versions MyProxy versions 5.0 through 5.2 Globus Toolkit versions 5.0.0 through 5.0.2 Description The issue allows remote attackers to conduct man-in-the-middle MITM attacks by spoofing the server, due to improper verification of the hostname or identi...

CVE-2011-0738

CVE-2011-0738 affects MyProxy 5.0–5.2 (used in Globus Toolkit 5.0.0–5.0.2). The vulnerability is a failure to properly verify the myproxy-server certificate’s hostname/identity in X.509, enabling remote attackers to spoof the server and perform MITM via a crafted certificate when running myproxy-...

WiPhire : A Wireless Penetration Testing Tool !

If you are active in the wireless penetration testing field, you must have seen a few scripts that either help you crack Wired Equivalent Privacy WEP. You also must have seen a few scripts that help you perform MITM attacks. But, not scripts that help you crack WEP and help you with MITM at the...

Squid-Imposter: A Squid Based Sidejacking Proxy !

That tool was meant specifically for Windows operating systems and also contains a module that uses HTML5 offline cache to store the payload permanently in all supporting browsers. Squid-Imposter just add the HTML5 offline cache storage functionality to the application and has been ported to Linu...