OpenVPN[v2.0.x]: foreign_option() formart string vulnerability.

[email protected]: OpenVPNv2.0.x: foreignoption format string vulnerability. 1. BACKGROUND OpenVPN is a robust and highly configurable VPN Virtual Private Network daemon which can be used to securely link two or more private networks using an encrypted tunnel over the Internet. OpenVPN's principal...

[SA17105] eyeOS Script Insertion and Exposure of User Credentials

TITLE: eyeOS Script Insertion and Exposure of User Credentials SECUNIA ADVISORY ID: SA17105 VERIFY ADVISORY: http://secunia.com/advisories/17105/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: eyeOS 0.x...

Sun Solaris SCTP socket option DoS

No description provided...

CVE-2005-3238

Affected software: Solaris 10. The CVE-2005-3238 entry describes multiple unspecified vulnerabilities in SCTP Socket Option Processing that can be exploited locally to cause a denial of service (panic). The available sources indicate local-access impact with no details on the exact root cause, vu...

CVE-2005-3238: Undefined Security Weakness

Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service panic via unspecified attack vectors...

CVE-2005-2943

Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option...

CVE-2005-2943: Undefined Security Weakness

Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option...

security flaw

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r remount option, which causes the file system to be remounted with just the read-only flag, which effectively clears the...

openssl mitm downgrade attack

The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSLOPMSIESSLV2RSAPADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to u...

OpenSSL SSL 2.0 rollback (weak cryptography)

Active man-in-the-middle attacker can force rollback to SSL 2.0 protocol with known cryptographic weakness for both client and server if SSLOPMSIESSLV2RSAPADDING or SSLOPALL configuration option is enabled...

Vulnerability in OpenSSL CVE-2005-2969

A deprecated option, SSLOPMISESSLV2RSAPADDING, could allow an attacker acting as a “man in the middle” to force a connection to downgrade to SSL 2.0 even if both parties support better protocols...

CVE-2005-2904

Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service application crash via a zero in the port number of the protocol option header, which triggers an assert error in the makeConnection function in zebedee.c...

CVE-2005-2904

Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service application crash via a zero in the port number of the protocol option header, which triggers an assert error in the makeConnection function in zebedee.c...

CVE-2005-2904: Undefined Security Weakness

Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service application crash via a zero in the port number of the protocol option header, which triggers an assert error in the makeConnection function in zebedee.c...

CVE-2005-2876: Undefined Security Weakness

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r remount option, which causes the file system to be remounted with just the read-only flag, which effectively clears the...

Snort <= 2.4.0 SACK TCP Option Error Handling

Snort = 2.4.0 SACK TCP Option Error Handling Package: Snort 2.4.0 And previous versions Vendor url: http://www.snort.org Class: Error Handling Exceptional Conditions Risk: High Credits: A. Alejandro Hernndez Hernndez Contact: nitrousatvulnfactdotcom BACKGROUND Snort is an open source network...

Snort <= 2.4.0 SACK TCP Option Error Handling Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================================================= Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay...

Snort 2.x - PrintTcpOptions Remote Denial of Service

Snort 2.x - PrintTcpOptions Remote Denial of Service // source: https://www.securityfocus.com/bid/14811/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the 'PrintTcpOptions' function of 'log.c', and is a result of a failure to...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service /------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

/------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2- TCP SACK Option: ... Kind: 5 Length: Variable...