Remote code execution

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...

CVE-2016-9366

CVE-2016-9366 affects Moxa NPort device servers (various 5110/5130/5150/5200/5400/5600 lines, plus 5100A, P5150A, 5200A, 5150AI-M12, 5250AI-M12, 5450AI-M12, 5600-8-DT/DTL, IA5450A, 6000/6110 series). A brute-force authentication bypass vulnerability exists, allowing an attacker to bypass authenti...

Bejtlich Books Explained

A reader asked me to explain the differences between two of my books. I decided to write a public response. If you visit the TaoSecurity Books page, you will see two different types of books. The first type involves books which list me as author or co-author. The second involves books to which I...

Fedora 25 : bitlbee (2017-deb82f0c0d)

BitlBee 3.5.1 30 Jan 2017 =========================== - purple: Fix crash on file transfer requests from unknown contacts. This was the result of an incomplete fix in the previous release and may result in remote DoS. Read the full security advisory at: https://bugs.bitlbee.org/ticket/1282 - Afte...

Fedora 25 : phpMyAdmin (2017-360e912fdb)

Welcome to phpMyAdmin 4.6.6, a release containing security and bug fixes. This release includes many security fixes of various levels of severity. We recommend all users upgrade to this release immediately. For full information on the vulnerabilities fixed and mitigation factors for users who are...

SUSE SLES11 Security Update : mysql (SUSE-SU-2017:0408-1)

This mysql version update to 5.5.54 fixes the following issues : - CVE-2017-3318: Unspecified vulnerability affecting Error Handling bsc1020896 - CVE-2017-3317: Unspecified vulnerability affecting Logging bsc1020894 - CVE-2017-3313: Unspecified vulnerability affecting the MyISAM component...

Ubuntu 16.10 : linux vulnerabilities (USN-3190-1)

Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon mcryptd in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service system crash. CVE-2016-10147 It was discovered that a...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:0380-1)

This update for libxml2 fixes the following issues : - CVE-2016-4658: use-after-free error could lead to crash bsc1005544 - Fix NULL dereference in xpointer.c when in recovery mode bsc1014873 - CVE-2016-9597: An XML document with many opening tags could have caused a overflow of the stack not...

CVE-2016-7933

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

Server Message Block (SMB) Protocol Version 1 Enabled (uncredentialed check)

The remote host Windows and/or Samba server supports Server Message Block Protocol version 1 SMBv1. Microsoft recommends that users discontinue the use of SMBv1 due to the lack of security features that were included in later SMB versions. Additionally, most security and compliance agencies...

Fedora 25 : python-crypto (2017-7c569d396b)

A heap-buffer overflow vulnerability was discovered in pycrypto leading to arbitrary code execution. All users of pycrypto's AES module that allow the mode of operation to be specified by an attacker, check for ECB explicitly and create the objects without specifying an IV are vulnerable to this...

Fedora 24 : python-crypto (2017-08207fe48b)

A heap-buffer overflow vulnerability was discovered in pycrypto leading to arbitrary code execution. All users of pycrypto's AES module that allow the mode of operation to be specified by an attacker, check for ECB explicitly and create the objects without specifying an IV are vulnerable to this...

CVE-2015-8140

CVE-2015-8140 : The ntpq protocol in NTP before 4.2.8p7 allows remote replay of authenticated commands by sniffing the network. The connected documents confirm this vulnerability within the NTP daemon and reference related advisories (e.g., F5 and Cisco) that group CVE-2015-8140 with other NTP is...

CVE-2015-7973

CVE-2015-7973 affects the NTP reference implementation (ntpd) prior to 4.2.8p6 and 4.3.x prior to 4.3.90. When configured in broadcast mode, authenticated broadcast packets can be recorded and replayed by an on‑path or MITM attacker, enabling a replay attack and unauthorized time updates. Public ...

SUSE SLES11 Security Update : gnutls (SUSE-SU-2017:0304-1)

This update for gnutls fixes the following issues : - Malformed asn1 definitions could cause a segmentation fault in the asn1 definition parser bsc961491. - CVE-2016-8610: Remote denial of service in SSL alert handling bsc1005879. - CVE-2017-5335: Decoding a specially crafted OpenPGP certificate...

Fedora 25 : ghostscript (2017-15f85f1cf1)

This is a security update for these CVEs : - CVE-2016-9601 - Heap-buffer overflow in jbig2imagenew function This update also solves possible licensing issues with ghostscritpt's source code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Debian DLA-804-1 : libgd2 security update

Multiple security issues have been found in the GD Graphics Library. They may lead to the execution of arbitrary code or causing application crash. CVE-2016-9317 Signed integer overflow in gdio.c CVE-2016-10167 Improper handling of issing image data can cause crash CVE-2016-10168 GD2 stores the...

CVE-2016-7985

The CVE-2016-7985 entry concerns tcpdump’s CALM FAST parser. It specifies a buffer overflow in print-calm-fast.c:calm_fast_print() in tcpdump before 4.9.0. Public documents identify upstream fixes upgrading tcpdump to 4.9.0 as the remediation.

CVE-2017-3297

The CVE-2017-3297 entry concerns Oracle FLEXCUBE Direct Banking (subcomponent: Framework). Affected versions are 12.0.2 and 12.0.3. The vulnerability is described as difficult to exploit, allowing a low-privilege attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking, ...

CVE-2017-3405

CVE-2017-3405 affects Oracle E-Business Suite, specifically the Oracle Advanced Outbound Telephony component (User Interface). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to ...