338 matches found
zeromq3 / libzmq downgrade attack
Protocol version downgrade attack is possible...
Tridium NiagaraAX Fox Channel Protocol Information Disclosure Vulnerability
TRIDIUM NiagaraAX is a software framework and development environment. A security vulnerability in the TRIDIUM NiagaraAX fox channel protocol allows remote attackers to exploit the vulnerability to gain access to the protocol version, internal IP address, Niagara-AX application, and more...
Linux kernel IPv4 Denial of Service Vulnerability
The Linux Kernel is the kernel of the Linux operating system. The IPv4 implementation in versions of Linux kernel prior to 3.18.8 fails to properly calculate the length of the RCU grace period, which could allow a remote attacker to cause a denial of service memory exhaustion or system crash via ...
RHEL 6 : openssl (RHSA-2014:1692)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1692 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL, Transport Layer Security TLS, and Datagram Transport Layer Security DTLS...
Important: Red Hat Security Advisory: openssl security update
Updated openssl packages that contain a backported patch to mitigate the CVE-2014-3566 issue and fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...
F5 Networks BIG-IP : Potential protocol version rollback vulnerability in OpenSSL (SOL5533)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL5533. The text description of this plugin is C F5 Networks...
PoPToP PPTP <= 1.1.4-b3 Remote Root Exploit (poptop-sane.c)
No description provided by source. / Fixed Exploit against PoPToP in Linux poptop-sane.c ./r4nc0rwh0r3 of blightninjas [email protected] blightninjas: bringing pain, suffering, and humiliation to the security world Expect more great release like helloworld-annotated.c and cd explained...
ejabberd weak cypher
Weak cyphers vulnerability allows to lower protocol version...
[IPv6 Disable Tool] Command-line Software to Enable or Disable IPv6 on Windows
IPv6 Disable is the free command-line tool to quickly Enable or Disable IPv6 Internet Protocol version 6 on your Windows system. It automatically checks for the current status of IPv6 and then enable/disable it accordingly. It is simple & easy to use tool. Also being a command-line based tool mak...
Vino VNC Server Remote Denial Of Service Vulnerability
This host is running Vino VNC Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbvinovncdosvuln.nasl 6104 2017-05-11 09:03:48Z teissa $ Vino VNC Server Remote Denial Of Service Vulnerability Authors: Veerendra GG Copyright: Copyright c 2013 Greenbone Network...
CVE-2012-5875
Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service NULL pointer dereference via a 1 crafted Connection HTTP header; a return carriage control character in the 2 Accept Language header, 3 User-agent header, 4 Host header, or 5 protocol version; or a 6 crafted HTTP...
UBUNTU-CVE-2012-5875
Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service NULL pointer dereference via a 1 crafted Connection HTTP header; a return carriage control character in the 2 Accept Language header, 3 User-agent header, 4 Host header, or 5 protocol version; or a 6 crafted HTTP...
CVE-2012-5875
Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service NULL pointer dereference via a 1 crafted Connection HTTP header; a return carriage control character in the 2 Accept Language header, 3 User-agent header, 4 Host header, or 5 protocol version; or a 6 crafted HTTP...
Flaw in Oracle Logon Protocol Leads to Easy Password Cracking
There is a serious vulnerability in the authentication protocol used by some Oracle databases, a flaw that could enable a remote attacker to brute-force a token provided by the server prior to authentication and determine a user’s password. The attacker could then log on as an authenticated user...
Distributed Network Protocol v3 'Stop Application' Alert (SCADA) (deprecated)
Binary data 6250.prm...
vuze-dht-info NSE Script
Retrieves some basic information, including protocol version from a Vuze filesharing node. As Vuze doesn't have a default port for its DHT service, this script has some difficulties in determining when to run. Most scripts are triggered by either a default port or a fingerprinted service. To get...
SSH SSH-1 Protocol Authentication Bypass Vulnerability
The host is running SSH and is prone to authentication bypass vulnerability. OpenVAS Vulnerability Test $Id: gbsshauthenticationbypassvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ SSH SSH-1 Protocol Authentication Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone...
Mandriva Update for squirrelmail MDVSA-2011:123 (squirrelmail)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Nmap NSE net: sshv1
Checks if an SSH server supports the obsolete and less secure SSH Protocol Version 1. OpenVAS Vulnerability Test $Id: gbnmapsshv1net.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Brandon Enright NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap...
Nmap NSE net: pgsql-brute
Performs password guessing against PostgreSQL. SYNTAX: pgsql.nossl: If set to '1' or 'true', disables SSL. pgsql.version: Force protocol version 2 or 3. passdb: The filename of an alternate password database. userdb: The filename of an alternate username database. unpwdb.passlimit: The maximum...