16 matches found
CVE-2019-25380
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dhcp.cgi script. The vulnerability enables attackers to inject JavaScript via posted parameters (e.g., BOOT_SERVER, BOOT_FILE, BOOT_ROOT, START_ADDR, END_ADDR, DNS1, DNS2, NTP1,...
CVE-1999-0521
An NIS domain name is easily guessable...
EUVD-1999-0519
Malware in sbrugna...
openSUSE Security Update : containerd / docker / docker-runc / etc (openSUSE-2019-1079)
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues : Security issues fixed : - CVE-2018-16875: Fixed a CPU Denial of Service bsc1118899. - CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in...
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc (important)
openSUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc Announcement ID: openSUSE-SU-2019:1079-1 Rating: important References: 1001161 1048046 1051429 1112980 1114832 1118897 1118898 1118899 1121412 1121967 1124308 Cross-References:...
SUSE-SU-2019:0573-1 Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues: Security issues fixed: - CVE-2018-16875: Fixed a CPU Denial of Service bsc1118899. - CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in...
NIS bootparamd Domain Name Disclosure
This module discloses the NIS domain name from bootparamd. You must know a client address from the target's bootparams file. Hint: try hosts within the same network range as the target. This module requires Metasploit: https://metasploit.com/download Current source:...
DEBIAN-CVE-2011-2716
The DHCP client udhcpc in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the 1 HOSTNAME, 2 DOMAINNAME, 3 NISDOMAIN, and 4 TFTPSERVERNAME host name options...
UBUNTU-CVE-2011-2716
The DHCP client udhcpc in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the 1 HOSTNAME, 2 DOMAINNAME, 3 NISDOMAIN, and 4 TFTPSERVERNAME host name options...
busybox: udhcpc insufficient checking of DHCP options
The DHCP client udhcpc in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the 1 HOSTNAME, 2 DOMAINNAME, 3 NISDOMAIN, and 4 TFTPSERVERNAME host name options...
RPC bootparamd NIS Domain Name Disclosure
Using the remote bootparamd service, it was possible to obtain the NIS domain of the network. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12237; scriptversion"$Revision: 1.16 $";...
NIS passwd.byname Map Disclosure
This script fetches the remote NIS 'passwd.byname' map, provided that the NIS domain name could be obtained. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid12238; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:37"; scriptnameenglish:"NIS passwd.byname Ma...
CVE-1999-0521
An NIS domain name is easily guessable...
CVE-1999-0521
Technical details about CVE-1999-0521 are not publicly provided in the supplied documents. Monitor for updates; information about affected products, root cause, and fixes may be published later.
RPC bootparamd Service Information Disclosure (Deprecated)
The bootparamd RPC service is running. It is used by diskless clients to get the necessary information needed to boot properly. If an attacker uses the BOOTPARAMPROCWHOAMI and provides the correct address of the client, then he will get its NIS domain back from the server. Once the attacker...
CVE-1999-0521
An NIS domain name is easily guessable...