Fedora SSSD Kerberos验证安全绕过漏洞

Bugraq ID: 37747 CVE ID：CVE-2010-0014 Fedora是一款基于linux内核的发行版本。 当sssd配置使用Kerberos进行校验时在域段中设置authprovider = krb5，在如下条件下可接收任意密码作为合法密码使用： -系统离线的情况下，如KDC配置的krb5kdcip选项没有启用到。 -尝试验证的用户在Kerberos realm中拥有一个合法TGT，并且在凭据缓存文件中设置了krb5realm选项。 RedHat SSSD 1.0.0-2 RedHat SSSD 1.0.0-1 RedHat SSSD 0.99.1-1 RedHat...

getwebshell for oracle-vulnerability warning-the black bar safety net

by elegant wind ping SQL create tablespace kjtest datafile 'e:\website\kj.asp' size 100k nologging ; Copy the code This will create the Table space. It should be noted that the oracle of the Table, The smallest unit is 100K. The following began to build the table: SQL Create TABLE WEBSHELLC...

[Follow_me series]oracle Shell-vulnerability warning-the black bar safety net

The patch from Sun network technology Forum: Days male the starter, reproduced indicate the source of! 1. SQL create tablespace kjtest datafile 'e:\website\kj.asp' 2. size 100k nologging ; Copy the code This will create the Table space. It should be noted that the oracle of the Table, The smalles...

Mozilla Browser engine crashes

The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1 the frame chain and synchronous events, 2 a SetMayHaveFrame assertion and...

Fedora Update for httrack FEDORA-2008-7862

Check for the Version of httrack OpenVAS Vulnerability Test Fedora Update for httrack FEDORA-2008-7862 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for httrack FEDORA-2008-7896

Check for the Version of httrack OpenVAS Vulnerability Test Fedora Update for httrack FEDORA-2008-7896 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: Offline Authentication Bypass Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta...

Max.Blog 1.0.6 Authentication Bypass

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog Salvatore "drosophila" Fresta - Max.Blog...

Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass

No description provided by source. Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: Offline Authentication Bypass Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta...

Max.Blog 1.0.6 - 'offline_auth.php' Offline Authentication Bypass

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog Salvatore "drosophila" Fresta - Max.Blog...

Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass

Exploit for unknown platform in category web applications ================================================================== Max.Blog Salvatore "drosophila" Fresta - Max.Blog...

Max.Blog 1.0.6 - offline_auth.php Offline Authentication Bypass

Max.Blog 1.0.6 - offlineauth.php Offline Authentication Bypass Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog Salvatore "drosophila" Fresta - Max.Blog /f...

[SECURITY] Fedora 8 Update: httrack-3.42.93-1.fc8

HTTrack is a free and easy-to-use offline browser utility. It allows the user to download a World Wide Web site from the Internet to a local directory, building recursively all directories, getting HTML, images, and other files from the server to your computer. HTTrack arranges the original site'...

[SECURITY] Fedora 9 Update: httrack-3.42.93-1.fc9

HTTrack is a free and easy-to-use offline browser utility. It allows the user to download a World Wide Web site from the Internet to a local directory, building recursively all directories, getting HTML, images, and other files from the server to your computer. HTTrack arranges the original site'...

Design/Logic Flaw

Unspecified vulnerability in McAfee Encrypted USB Manager 3.1.0.0, when the Re-use Threshold for passwords is nonzero, allows remote attackers to conduct offline brute force attacks via unknown vectors...

CVE-2008-3605

Unspecified vulnerability in McAfee Encrypted USB Manager 3.1.0.0, when the Re-use Threshold for passwords is nonzero, allows remote attackers to conduct offline brute force attacks via unknown vectors...

CVE-2008-3605

CVE-2008-3605 affects McAfee Encrypted USB Manager 3.1.0.0. The vulnerability is described as an unspecified issue where, if the Re-use Threshold for passwords is nonzero, remote attackers can conduct offline brute-force attacks via unknown vectors. The CVSS base score is 6.8 (medium) with networ...

CVE-2008-3605

Unspecified vulnerability in McAfee Encrypted USB Manager 3.1.0.0, when the Re-use Threshold for passwords is nonzero, allows remote attackers to conduct offline brute force attacks via unknown vectors...

McAfee加密USB管理器远程安全绕过漏洞

BUGTRAQ ID:30630 CNCAN ID：CNCAN-2008081202 McAfee Encrypted USB Manager是一款采用强大的加密技术，并结合强式存取控制方法来保护资料的解决方案。 McAfee Encrypted USB Manager存在安全绕过问题，远程攻击者可以利用漏洞执行离线攻击尝试猜测密码。 此漏洞只存在于当密码"Re-use Threshold"策略设置为非零值才有效，目前没有详细漏洞细节提供。 0 McAfee Encrypted USB Manager 3.1 0 升级到最新版本： McAfee Encrypted USB Manager...

openSUSE 10 Security Update : samba (samba-2584)

"A logic error in the deferred open code can lead to an infinite loop in Samba's smbd daemon. In addition the following changes are included with these packages : - Disable broken DCERPC funnel patch; 242833. - Avoid winbind event handler for internal domains. - Fix smbcontrol winbind offline;...