Sguil/PADS SQL Injection / Crash

Sguil/PADS SQL injection and server crash exploit by Ataraxia Benjamin Rose Public announcement made 7/15/09. Please visit http://allmybase.com/ my blog for more up-to-date information, and a quick patch. This exploit has the ability to render any Intrusion Detection System utilizing the sguil...

Ruby Detection (Linux/Unix SSH Login)

SSH login-based detection of Ruby. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900569";...

OpenSSH CBC Mode Information Disclosure Vulnerability

OpenSSH is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

CentOS 3 / 4 : openssh (CESA-2006:0738)

Updated openssh packages that fix an authentication flaw are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the...

Mandriva Linux Security Advisory : openssh (MDVSA-2008:078)

OpenSSH allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Mandriva Linux Security Advisory : openssh (MDVSA-2008:098)

A vulnerability in OpenSSH 4.4 through 4.8 allowed local attackers to bypass intended security restrictions enabling them to execute commands other than those specified by the ForceCommand directive, provided they are able to modify to /.ssh/rc CVE-2008-1657. The updated packages have been patche...

Ubuntu 6.06 LTS / 7.04 / 7.10 : openssh vulnerabilities (USN-649-1)

It was discovered that the ForceCommand directive could be bypassed. If a local user created a malicious /.ssh/rc file, they could execute arbitrary commands as their user id. This only affected Ubuntu 7.10. CVE-2008-1657 USN-355-1 fixed vulnerabilities in OpenSSH. It was discovered that the fixe...

OpenSSH CBC Mode Information Disclosure Vulnerability

The host is installed with OpenSSH and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: openssh32319remote.nasl 5002 2017-01-13 10:17:13Z teissa $ OpenSSH CBC Mode Information Disclosure Vulnerability Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone...

Mandriva Update for openssh MDVSA-2008:078 (openssh)

Check for the Version of openssh OpenVAS Vulnerability Test Mandriva Update for openssh MDVSA-2008:078 openssh Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for openssh MDVSA-2008:098 (openssh)

Check for the Version of openssh OpenVAS Vulnerability Test Mandriva Update for openssh MDVSA-2008:098 openssh Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for openssh-askpass-qt MDKA-2007:127 (openssh-askpass-qt)

Check for the Version of openssh-askpass-qt OpenVAS Vulnerability Test Mandriva Update for openssh-askpass-qt MDKA-2007:127 openssh-askpass-qt Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for openssh MDVSA-2008:078 (openssh)

Check for the Version of openssh OpenVAS Vulnerability Test Mandriva Update for openssh MDVSA-2008:078 openssh Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for openssh MDKSA-2007:236 (openssh)

Check for the Version of openssh OpenVAS Vulnerability Test Mandriva Update for openssh MDKSA-2007:236 openssh Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for openssh-askpass-qt MDKA-2007:127 (openssh-askpass-qt)

Check for the Version of openssh-askpass-qt OpenVAS Vulnerability Test Mandriva Update for openssh-askpass-qt MDKA-2007:127 openssh-askpass-qt Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Security projects aim for Google Summer of Code

By Robert Lemos, SecurityFocus A number of security-focused open-source projects have announced their participation as mentoring organizations in Google’s Summer of Code google.com. They include the NMap Project, the OpenSSH project and the Honeynet Project. Read the full article securityfocus.co...

Ubuntu Update for openssl-blacklist update USN-612-11

Ubuntu Update for Linux kernel vulnerabilities USN-612-11 OpenVAS Vulnerability Test $Id: gbubuntuUSN61211.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openssl-blacklist update USN-612-11 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for openssl-blacklist update USN-612-9

Ubuntu Update for Linux kernel vulnerabilities USN-612-9 OpenVAS Vulnerability Test $Id: gbubuntuUSN6129.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openssl-blacklist update USN-612-9 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-649-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-612-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-597-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...