SuSE 11.3 Security Update : ntp (SAT Patch Number 9540)

The NTP time service could have been used for remote denial of service amplification attacks. This issue can be fixed by the administrator as we described in our security advisory SUSE-SA:2014:001: http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005. html and on...

Raritan PowerIQ 4.1.0 - SQL Injection Vulnerability

No description provided by source. =begin Raritan PowerIQ suffers from an unauthenticated SQL injection vulnerability within an endpoint used during initial configuration of the licensing for the product. This endpoint is still available after the appliance has been fully configured. POST...

SUSE-SU-2015:0259-3 Security update for ntp

The NTP time service could have been used for remote denial of service amplification attacks. This issue can be fixed by the administrator as we described in our security advisory SUSE-SA:2014:001 http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.html and on...

Raritan PowerIQ 4.1.0 - SQL Injection (Metasploit)

Raritan PowerIQ 4.1.0 - SQL Injection Metasploit =begin Raritan PowerIQ suffers from an unauthenticated SQL injection vulnerability within an endpoint used during initial configuration of the licensing for the product. This endpoint is still available after the appliance has been fully configured...

Raritan PowerIQ 4.1.0 - SQL Injection Vulnerability

Exploit for linux platform in category web applications =begin Raritan PowerIQ suffers from an unauthenticated SQL injection vulnerability within an endpoint used during initial configuration of the licensing for the product. This endpoint is still available after the appliance has been fully...

Raritan PowerIQ Unauthenticated SQL Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Raritan PowerIQ Unauthenticated SQL Injection", 'Description' = %q This module will exploit an unauthenticated SQL injection in order...

Large-Scale DDoS Attacks Continue to Spike

Although the average size of a given DDoS attack is going down, the number of attacks at the upper end of the scale is increasing, with researchers at Arbor Networks reporting more than 100 attacks of 100 Gbps in the first half of this year. In order for a DDoS attack to be effective, bad guys us...

NTP Amplification Denial Of Service Tool

!/usr/bin/env python from scapy.all import import sys import threading import time NTP Amp DOS attack by DaRkReD usage ntpdos.py ex: ntpdos.py 1.2.3.4 file.txt 10 packet sender def deny: Import globals to function global ntplist global currentserver global data global target ntpserver =...

Stable Channel Update

The Chrome Team is excited to announce the promotion of Chrome 36 to the Stable channel for Windows, Mac and Linux. Chrome 36.0.1985.125 contains a number of fixes and improvements, including: Rich Notifications Improvements An Updated Incognito / Guest NTP design The addition of a Browser crash...

Cisco IOS Software and IOS XE Software NTP Access Group Vulnerability

A vulnerability in the implementation of the ntp access-group command in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass the configured Network Time Protocol NTP access group and query the affected NTP-configured server for the time. The...

CVE-2014-3309

The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318...

Use after free

The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318...

CVE-2014-3309

Summary of CVE-2014-3309 (Cisco) : The NTP implementation in Cisco IOS and IOS XE is vulnerable due to improper handling of the ntp access-group command in a deny-all configuration, potentially allowing a remote attacker to bypass NTP access restrictions and query the NTP server configured to den...

CVE-2014-3309

The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318...

Linux NTP query client 4.2.6p1 - Heap Overflow Vulnerability

No description provided by source. Linux NTP query client v4.2.6p1 Heap Overflow vulnerability vendor: http://www.ntp.org/ software: http://www.eecis.udel.edu/ntp/ntpspool/ntp4/ntp-4.2/ntp-4.2.6p1.tar.gz impact: minor/informational There is a local heap overflow in the ntpq utility client that...

NTP daemon readvar Buffer Overflow

No description provided by source. $Id: ntpoverflow.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

NTP ntpd monlist Query Reflection - Denial of Service

No description provided by source...

Ntpd Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2540/info NTP, the Network Time Protocol, is used to synchronize the time between a computer and another system or time reference. It uses UDP as a transport protocol. There are two protocol versions in use: NTP v3 and NT...

Buffalo TeraStation TS-Series - Multiple Vulnerabilities

No description provided by source. Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it...

Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities

No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com Zavio IP Cameras multiple vulnerabilities 1. Advisory Information Title: Zavio IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0302 Advisory URL:...