2817 matches found
rsync 2.3/2.4/2.5 Signed Array Index Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3958/info A vulnerability exists within some versions of rsync. Under some circumstances, a remotely supplied signed value is used as an array index, allowing NULL bytes to be written to arbitrary memory locations...
rsync <= 2.5.7 - Local stack overflow Root Exploit
No description provided by source. / rsync = 2.5.7 Local Exploit Saved EIP on stack is overwritten with address of shellcode in memory Generally rsync is not setuid or setgid so just a local shell is of no use So i used a portbinding shellcode as a PoC of a different attack vector. RET is...
openSUSE Security Update : rsync (openSUSE-SU-2011:0441-1)
Specially crafted requests could cause a memory corruption on the receiving side of an rsync transfer client side or server that allows to push CVE-2011-1097. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
openSUSE Security Update : Rsync (openSUSE-SU-2014:0595-1)
Rsync was updated to fix a denial of service attack that could be used by remote attackers without authentification CVE-2014-2855. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : rsync (openSUSE-SU-2011:0441-1)
Specially crafted requests could cause a memory corruption on the receiving side of an rsync transfer client side or server that allows to push CVE-2011-1097. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
Accellion Secure File Transfer Code Execution
, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Accellion Secure File Transfer SFTP Satellite Remote Root Code Execution PDF:...
Ubuntu Update for rsync USN-2171-1
Check for the Version of rsync OpenVAS Vulnerability Test $Id: gbubuntuUSN21711.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for rsync USN-2171-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...
Ubuntu: Security Advisory (USN-2171-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
rsync DoS
Resourcs exhaustion...
[USN-2171-1] rsync vulnerability
========================================================================== Ubuntu Security Notice USN-2171-1 April 23, 2014 rsync vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-24.5.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...
rsync infinite loop denial of service vulnerability-vulnerability warning-the black bar safety net
Affected system: rsync rsync 3.1.0 Description: CVECAN ID: CVE-2 0 1 4-2 8 5 5 rsync is a fast incremental file transfer tool that is used in the same host the backup inside the backup. rsync 3.1.0, and other versions in the"checksecret"functionauthenticate. cmemory in a logic error, which may...
Ubuntu 14.04 LTS : rsync vulnerability (USN-2171-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2171-1 advisory. Ryan Finnie discovered that the rsync daemon incorrectly handled invalid usernames. A remote attacker could use this issue to cause rsync to consume resources,...
CVE-2014-2855
The checksecret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service infinite loop and CPU consumption via a user name which does not exist in the secrets file...
DEBIAN-CVE-2014-2855
The checksecret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service infinite loop and CPU consumption via a user name which does not exist in the secrets file...
CVE-2014-2855
The checksecret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service infinite loop and CPU consumption via a user name which does not exist in the secrets file...
USN-2171-1 rsync vulnerability
Ryan Finnie discovered that the rsync daemon incorrectly handled invalid usernames. A remote attacker could use this issue to cause rsync to consume resources, resulting in a denial of service...
USN-2171-1: rsync vulnerability
Ryan Finnie discovered that the rsync daemon incorrectly handled invalid usernames. A remote attacker could use this issue to cause rsync to consume resources, resulting in a denial of service...
CVE-2014-2855
The checksecret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service infinite loop and CPU consumption via a user name which does not exist in the secrets file...
CVE-2014-2855
CVE-2014-2855 affects rsync up to version 3.1.0. The vulnerability resides in check_secret() in authenticate.c, where a username not present in the secrets file can trigger an infinite loop and CPU denial of service. Multiple advisories confirm the issue and reference the affected rsync, with pat...