openSUSE Security Update : postfix (postfix-1969)

The value of SMTPDLISTENREMOTE accidentally defaulted to 'yes'. The postfix smtp daemon therefore was reachable over the network by default. This update therefore resets the value to 'no' in /etc/sysconfig/mail. If you intentionally want postfix to listen for remote connection you need to manuall...

SAP RFC SDK — Format String

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6.40 7.11 Vendor URL: Bugs: Format String Vulnerability Exploits: YES Reported: 15.12.2009 Vendor response: 18.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov Description SAP...

MySQL Login Handshake Information Disclosure (CVE-2006-1516)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol. In addition to...

MySQL yaSSL SSL Hello Message Buffer Overflow (CVE-2008-0226)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol. MySQL Server...

Microsoft Windows NTLMSSP Authentication Request Remote Network Name Disclosure

The remote host listens on tcp port 445 and replies to SMB requests. By sending an NTLMSSP authentication request it is possible to obtain the name of the remote system and the name of its domain. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42410; scriptversion...

Novell eDirectory 8.8 SP5 for Windows - Buffer Overflow Vulnerability

Product: Novell eDirectory 8.8 SP5 for Windows Vulnerability Type: Buffer Overflow Attack Vector: Network Request Where: From Remote or Local Network Solution: Unpatched Description: Vulnerability is in dhost module. A malformed http get request to /dhost/modules?L: cause a buffer overflow,...

Google Apps mailto uri handler cross-browser remote command execution

Exploit for unknown platform in category remote exploits ===================================================================== Google Apps mailto uri handler cross-browser remote command execution ===================================================================== Title: Google Apps mailto uri...

InGate Firewall和SIParator多个安全漏洞

BUGTRAQ ID: 34309 Ingate Firewall和SIParator都是企业级的硬件防火墙设备。 Ingate Firewall和SIParator中存在多个安全漏洞，恶意用户可以利用这些漏洞执行欺骗攻击、绕过某些安全限制或导致拒绝服务。 1 如果将IPsec隧道将远程网络设置为允许“Remote/private address”配置单元，就可能允许任意用户配置单元。 2 IDS/IPS实现中的错误可能允许SIP报文绕过欺骗和IPsec检查。 3 验证DSA和ECDSA密钥签名中的错误可能导致伪造服务器证书。 4 验证HMAC...

Neostrada Livebox Remote Network Down PoC Exploit

Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends: cOndemned,joker,chomzee,TBH IRC:...

Neostrada Livebox Router Remote Network Down PoC Exploit

No description provided by source. Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends:...

Neostrada Livebox Router - Remote Network Down (PoC)

Neostrada Livebox Router - Remote Network Down PoC Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members:...

Galaxy FTP Server 1.0 (Neostrada Livebox DSL Router) DoS Exploit

No description provided by source. / Discovered bY 0in From DaRk-CodeRs Programming & Security Group! Contact: 0indotemailatgmaildotcom HOMEPAGE: http://dark-coders.4rh.eu DESCRIPTION: Livebox router is vulnerability to remote but from local network, because firewall working.. buffer overflow DoS...

DEBIAN-CVE-2007-5964

The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux RHEL 5, omits the nosuid option for the hosts /net filesystem map, which allows local users to gain privileges via a setuid program on a remote NFS server...

[Full-disclosure] Secunia Research: Symantec Mail Security for SMTP Boundary Errors

====================================================================== Secunia Research 27/06/2007 - Symantec Mail Security for SMTP Boundary Errors - ====================================================================== Table of Contents Affected...

WebWasher filtering proxy localhost access

It's possible to access localhost from remote network with a proxy...

Problem with HP r-cmnds

Overview A problem existed with HP versions of the r-commands remshd, rexecd, rlogin, rlogind, remsh, rcp, rexec, rdist in use circa December, 1998. Description See HEWLETT-PACKARD COMPANY SECURITY BULLETIN: 00090, registration required 07 December 1998 for a description of the problem. No other...