1685 matches found
CYBSEC Pre-Advisory: SAP TRUSTED_SYSTEM_SECURITY RFC Function Information Disclosure
The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityAdvisorySAPTRUSTEDSYSTEMSECURITYRFCFunctionInformationDisclosure.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP TRUSTEDSYSTEMSECURITY RFC Function Information Disclosure...
SAP RFC library multiple security vulnerabilities
Buffer overflows, DoS conditions and information leak in TRUSTEDSYSTEMSECURITY, RFCSTARTPROGRAM, RFCSTARTGUI, SYSTEMCREATEINSTANCE, RFCSETREGSERVERPROPERTY...
CYBSEC Release: SAP Security - Paper & Tool release
I am proud to announce the release of a White-paper and an open-source tool, both addressing security of SAP R/3 systems. The paper describes vulnerabilities discovered in the SAP RFC interface implementation and library, as well as some attacks that can be performed over SAP systems. The tool,...
CYBSEC Security Pre-Advisory: SAP SYSTEM_CREATE_INSTANCE RFC Function Buffer Overflow
----------------------------------------- Mariano Nunez Di Croce CYBSEC S.A. Security Systems Email: [email protected] Tel/Fax: 54-11 4371-4444 Web: http://www.cybsec.com PGP: http://www.cybsec.com/pgp/mnunez.txt ----------------------------------------- The following pre-advisory is also availab...
CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service
The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityAdvisorySAPRFCSETREGSERVERPROPERTYRFCFunctionDenialofService.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP RFCSETREGSERVERPROPERTY RFC Function Denial Of Service...
Information leak from client application with technical information
Data leakage through service information and network protocol in the client application. When exchanging information, you are always transmitting data. However, at different levels everyone remembers ISO/OSI?, service information is added to your data. What is this information, what can it say...
FreeBSD : bind9 -- Denial of Service in named(8) (ef3306fc-8f9b-11db-ab33-000e0c2e438a)
Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...
Linux Kernel ULE包处理远程拒绝服务漏洞
Linux kernel是一款开放源代码的操作系统。 Linux kernel的ULE解封装代码存在缺陷，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 攻击者发送畸形的使用SNDU长度为0的ULEUnidirectional Lightweight Encapsulation RFC 4326包，可导致机器停止响应，造成拒绝服务攻击。 Linux kernel 2.6.17 .8 可采用如下补丁： --- diff -uprN linux-2.6.17.8/drivers/media/dvb/dvb-core/dvbnet.c...
Hacker attack and Defense of the PPPoE authentication and use-vulnerability and early warning-the black bar safety net
A Foreword In recent years, Internet data traffic has developed rapidly, broadband users showed explosive growth, the operators in the use of xDSL, LAN, HFC, wireless and other access methods at the same time, in order to build an operable, manageable and profitable broadband network, is very...
Re: [Full-disclosure] NetBSD FTPD and ports ***REMOTE ROOOOOT HOLE***
I can confirm that this bug is present on OSX 10.3.9 at the very least. lukemftpd-20040810 is the version this was tested against. I am fairly sure that this issue was patched recently in: Security Update 2006-003 FTPServer CVE-ID: CVE-2006-1445 Available for: Mac OS X v10.3.9, Mac OS X Server...
iDefense Security Advisory 11.26.06: Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability
Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability iDefense Security Advisory 11.26.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 26, 2006 I. BACKGROUND Qbik WinGate is an Internet gateway and communications server. It includes functionality related to efficientl...
GNU Mailman跨站脚本及拒绝服务漏洞
GNU Mailman是一款开放源码的邮件列表管理系统。 Mailman中存在多个安全漏洞，具体如下： 1 日志功能中的错误允许攻击者通过特制的URL向错误日志中注入欺骗性的日志消息。这可能诱骗管理员访问恶意的Web站点。 2 Mailman在处理畸形MIME首部时没有遵循RFC 2231标准，可能导致拒绝服务。 3 Mailman没有正确过滤某些用户输入，允许在用户浏览器会话中执行任意HTML和脚本代码。 受影响系统： GNU Mailman 2.1.9 不受影响系统： GNU Mailman 2.1.9rc1 GNU Mailman 2.1.9 厂商补丁： GNU ---...
ISC BIND多个拒绝服务漏洞
BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominumwww.nominum.com公司来完成。 ISC BIND的实现上存在多个拒绝服务漏洞，远程攻击者可能利用此漏洞导致BIND拒绝服务。 BIND在处理SIG查询时存在断言错误。如果返回了多于一个的SIGcovered RRset的话，就会导致递归服务器崩溃；或者对于权威服务器，如果名称服务器服务于RFC 2535 DNSSEC区且被查询了有多个SIGcovered RRset的SIG记录（如zone apex），则在创建响应的时候也会触发类似的错误。...
GLSA-200609-12 : Mailman: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200609-12 Mailman: Multiple vulnerabilities Mailman fails to properly handle standards-breaking RFC 2231 formatted headers. Furthermore, Moritz Naumann discovered several XSS vulnerabilities and a log file injection. Impact : An...
Multiple RSA implementations fail to properly handle signatures
Overview Multiple RSA implementations fail to properly handle RSA signatures. This vulnerability may allow an attacker to forge RSA signatures. Description RSA signatures are used to authenticate the source of a message. To prevent RSA signatures from being forged, messages are padded with data t...
Design/Logic Flaw
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...
CVE-2006-2941
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...
CVE-2006-2941
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...
CVE-2006-2941
Mailman vulnerability CVE-2006-2941 affects Mailman prior to 2.1.9rc1, involving how RFC 2231 formatted headers are processed. Exploitation can lead to a denial of service on mailing lists. Connected advisories (Red Hat RHSA-2006:0600, Ubuntu USN-345-1, SuSE/SLES9 updates, Gentoo GLSA 200609-12, ...
