eapmd5pass 'extract_eapusername' function denial of service vulnerability

eapmd5pass is a penetration testing tool for attacks against the EAP-MD5 protocol. A security vulnerability exists in the 'extracteapusername' function in eapmd5pass version 1.4. A remote attacker can exploit this vulnerability by generating specially crafted network traffic to cause the eapmd5pa...

Weak Algorithm Vulnerability in Huawei USG Products

Huawei USG6300/USG6600 are firewall products from Huawei, China. A weak algorithmic vulnerability exists in several Huawei firewall USG6300/USG6600 products. By exploiting this weak algorithm vulnerability, an attacker can intercept information transmitted over the network and successfully decryp...

Moderate: Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update

An update for tcpdump is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2017-11668

An out-of-bounds read flaw related to the assesspacket function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially...

CVE-2017-11669

An out-of-bounds read flaw related to the assesspacket function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially...

Out-of-bounds

A length validation leading to out-of-bounds read and write flaw was found in the way eapmd5pass 1.4 handled network traffic in the extracteapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic...

CVE-2017-11670

A length validation leading to out-of-bounds read and write flaw was found in the way eapmd5pass 1.4 handled network traffic in the extracteapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic...

CVE-2017-11670

The CVE-2017-11670 entry concerns eapmd5pass 1.4, where a length validation flaw in extract_eapusername allows an out-of-bounds read/write. A remote attacker could crash the eapmd5pass process by sending specially crafted network traffic. Connected sources (CNVD/NVD) corroborate the remote‑trigge...

CVE-2017-11668

An out-of-bounds read flaw related to the assesspacket function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially...

REDDOXX Appliance Unauthenticated Access Vulnerability

Exploit for jsp platform in category web applications Unauthenticated Access to Diagnostic Functions in REDDOXX Appliance RedTeam Pentesting discovered a vulnerability which allows attackers unauthenticated access to the diagnostic functions of the administrative interface of the REDDOXX applianc...

REDDOXX Appliance Unauthenticated Access

Advisory: Unauthenticated Access to Diagnostic Functions in REDDOXX Appliance RedTeam Pentesting discovered a vulnerability which allows attackers unauthenticated access to the diagnostic functions of the administrative interface of the REDDOXX appliance. The functions allow, for example, to...

Microsoft Internet Explorer CVE-2017-8618 Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of...

CVE-2017-7406

The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL Certificate. An attacker can simply monitor network traffic to steal a user's credentials and/or credentials of users being added while sniffing...

Design/Logic Flaw

The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL Certificate. An attacker can simply monitor network traffic to steal a user's credentials and/or credentials of users being added while sniffing...

CVE-2017-7406

The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL Certificate. An attacker can simply monitor network traffic to steal a user's credentials and/or credentials of users being added while sniffing...

Barracuda WAF V360 Firmware 8.0.1.014 Support Tunnel Hijack Exploit

Barracuda WAF V360 with firmware 8.0.1.014 suffers from a support tunnel hijacking vulnerability. Title: Barracuda WAF Support Tunnel Hijack 1. Vulnerability Details Affected Vendor: Barracuda Affected Product: Web Application Firewall V360 Affected Version: Firmware v8.0.1.014 Platform: Embedded...

[SECURITY] Fedora 25 Update: globus-net-manager-0.17-1.fc25

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

Petya Destructive Malware Variant Spreading via Stolen Credentials and EternalBlue Exploit

UPDATE July 21: FireEye continues to track this threat. An earlier version of this post has been updated to reflect new findings. On June 27, 2017, multiple organizations – many in Europe – reported significant disruptions they are attributing to a variant of the Petya ransomware, which we are...

iBall Baton iB-WRA150N - Unauthenticated DNS Change Exploit

shell !/bin/bash iBall Baton iB-WRA150N Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

UTstarcom WA3002G4 - Unauthenticated DNS Change Exploit

shell !/bin/bash UTstarcom WA3002G4 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once modified...