FreeIPS 1.0 Protected Service Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10541/info It is reported that FreeIPS is susceptible to a denial of service vulnerability. FreeIPS scans TCP connections for particular strings, defined by regular expressions. If a packet matches the regular expression,...

Web Help Desk by SolarWinds - Stored XSS

No description provided by source. Author: loneferret of Offensive Security Product: Web Help Desk by SolarWinds Version: 11.0.7 older versions may be affected Vendor Site: http://www.webhelpdesk.com Software Download: http://www.webhelpdesk.com/help-desk-software/ Discovered: August 18th 2012...

Red Hat 8/9 Directory Server Crafted Search Pattern Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30871/info Red Hat Directory Server is prone to a denial-of-service vulnerability because the server fails to handle specially crafted search patterns. An attacker can exploit this issue to consume CPU resources with one...

DenyHosts: Denial of service

Background DenyHosts is a script intended to be run by Linux system administrators to help thwart SSH server attacks. Description DenyHosts does not properly define the regular expressions used when parsing SSH authentication logs. Impact A remote attacker could possibly cause a Denial of Service...

openSUSE Security Update : dhcp (openSUSE-SU-2011:1318-1)

Specially crafted requests could crash dhcpd if the server used regular expressions for matching CVE-2011-4539. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dhcp-5532. The text description ...

openSUSE Security Update : seamonkey (openSUSE-SU-2012:0007-1)

seamonkey version 2.6 fixes several security issues : - MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards - MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library - MFSA 2011-55/CVE-2011-3658: nsSVGValue out-of-bounds access - MFSA...

openSUSE Security Update : bind (openSUSE-2013-297)

bind was updated to 9.9.2-P2, fixing a security issue in regular expression handling. CVE-2013-2266 RT 32688 https://kb.isc.org/article/AA-00871 bnc811876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : dhcp (openSUSE-2011-68)

Applied security fix for a DoS due to processing certain regular expressions, extracted from 4.2.3-P1 bnc735610, CVE-2011-4539 : - Add a check for a NULL pointer before calling the regexec function. Without out this check we could, under some circumstances, pass a NULL pointer to the regexec...

openSUSE Security Update : MozillaFirefox / MozillaThunderbird / seamonkey / etc (openSUSE-2011-101)

Mozilla Firefox and Thunderbird version 9 and seamonkey version 2.6 updates fix several security issues : - MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards - MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library - MFSA...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-5050)

Mozilla Thunderbird was updated to 3.1.12 fixing various bugs and security issues : Mozilla Foundation Security Advisory 2011-32 MFSA 2011-32 http://www.mozilla.org/security/announce/2011/mfsa2011-32.html Many of the issues listed below are not exploitable through mail since JavaScript is disable...

openSUSE Security Update : dhcp (openSUSE-SU-2013:0619-1)

The ISC dhcp server was updated to fix a denial of service attack via regular expressions : - Removed regex.h check from configure in bind sources bnc811934, CVE-2013-2266. Make the bind export library build output visible. dhcp-4.2.4-P2-no-bind-regex-check.CVE-2013-2266.diff Also fixed : - Added...

Batch site DNS zone transfer vulnerability detection-bash shell implemented-vulnerability warning-the black bar safety net

0x00 background The following illustration of eecs. cc author self-built a machine with a private root DNS server, and open the zone transfer permissions, so the results: the cc zone transfer success. The figure is just an experimental verification, the following article started! ! 2 0 1 4 0 5 1 ...

[SECURITY] Fedora 19 Update: mutt-1.5.23-2.fc19

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

[SECURITY] Fedora 20 Update: mutt-1.5.23-2.fc20

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

Fedora Update for mutt FEDORA-2014-5880

Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2014-5880 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Struts2 then exposed S2-0 2 0 patch bypass vulnerability – evil regular expressions-vulnerability warning-the black bar safety net

4 on 2 to 4 November, the network exposed in the article“Security researchers noted that the Apache Struts2 vulnerability Bulletin S2-0 2 0, in process repair CVE-2 0 1 4-0 0 9 4 bug fixes program vulnerability exists, resulting patch is completely bypassed.” Affected products: Struts 2.0.0 –...

Medium: php55

Issue Overview: The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service CPU consumption via a crafted ASCII file that triggers a...

Adobe Flash Player - Regular Expression Heap Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...

Adobe Flash Player Regular Expression Heap Overflow

This Metasploit module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 11.5.502.149. By supplying a specially crafted swf file with special regex value, it is possible to trigger an memory corruption, which results in remote code execution under the context of...

Adobe Flash Player Regular Expression Heap Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...