CVE-2015-1379

CVE-2015-1379 affects socat prior to 1.7.3.0 and 2.0.0-b8, where signal handler implementations are not async-signal-safe, enabling remote attackers to cause a denial of service (process freeze or crash). Impact is partial availability loss; exploitation is network-based. Affected products/versio...

CVE-2015-1379

The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service process freeze or crash...

PuTTY 0.68 - ssh_agent_channel_data Integer Overflow Heap Corruption

PuTTY 0.68 - sshagentchanneldata Integer Overflow Heap Corruption Source: https://www.chiark.greenend.org.uk/sgtatham/putty/wishlist/vuln-agent-fwd-overflow.html summary: Vulnerability: integer overflow permits memory overwrite by forwarded ssh-agent connections class: vulnerability: This is a...

Apple Revokes Certificate Used By OSX/Dok Malware

Apple revoked a legitimate developer certificate used by hackers behind malware dubbed OSX/Dok, which was able to eavesdrop on secure HTTPS traffic of infected systems. On Sunday, Apple also rolled out an update to its XProtect built-in antimalware software to fend off existing and upcoming...

A Red Teamer’s guide to pivoting

A Red Teamer’s guide to pivoting A Red Teamer's guide to pivoting Penetration testers often traverse logical network boundaries in order to gain access to client’s critical infrastracture. Common scenarios include developing the attack into the internal network after successful perimeter breach o...

Design/Logic Flaw

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret...

CVE-2016-2217

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret...

UBUNTU-CVE-2016-2217

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret...

DEBIAN-CVE-2016-2217

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret...

CVE-2016-2217

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret...

CVE-2016-2217

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret...

CVE-2016-2217

CVE-2016-2217 concerns socat’s OpenSSL address implementation. The issue is that in socat versions 1.7.3.0 and 2.0.0-b8 , the Diffie-Hellman (DH) parameter uses a non-prime value, making it easier for a remote attacker to deduce the shared secret. The vulnerability affects the OpenSSL handling wi...

CVE-2016-2217

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret...

CVE-2016-2217

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret...

socat: Multiple vulnerabilities

Background socat is a multipurpose bidirectional relay, similar to netcat. Description Multiple vulnerabilities have been discovered in socat. Please review the references below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process, or obta...

GLSA-201612-23 : socat: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-23 socat: Multiple vulnerabilities Multiple vulnerabilities have been discovered in socat. Please review the references below for details. Impact : A remote attacker could possibly execute arbitrary code with the privileges...

Socat Security Bypass Vulnerability

Socat is a set of command-line based networking tools. Socat has a security vulnerability that allows an attacker to bypass security restrictions and gain access to sensitive information...

openSUSE Security Update : socat (openSUSE-2016-218) (Logjam)

This update for socat fixes the following issues : Changes in socat : - update to 1.7.3.1, security fixes : - Socat security advisory 7 and MSVR-1499: 'Bad DH p parameter in OpenSSL' boo938913 and CVE-2015-4000. - Socat security advisory 8: 'Stack overflow in arguments parser' boo964844 - Update ...

openSUSE Security Update : socat (openSUSE-2016-215) (Logjam)

This update for socat fixes the following issues : Changes in socat : - update to 1.7.3.1, security fixes : - Socat security advisory 7 and MSVR-1499: 'Bad DH p parameter in OpenSSL' boo938913 and CVE-2015-4000. - Socat security advisory 8: 'Stack overflow in arguments parser' boo964844 - Update ...

Socat stack buffer overflow vulnerability

Socat is a set of command-line based networking tools. Socat suffers from a stack buffer overflow vulnerability that could be exploited by an attacker to crash an application or execute arbitrary code...