363 matches found
CVE-2015-0799: Improper Input Validation
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header...
Firefox < 37.0.1 HTTP/2 Alt-Svc Header Certificate Verification Bypass
The version of Firefox installed on the remote Windows host is prior to 37.0.1. It is, therefore, affected by an error related to the HTTP/2 'Alt-Svc' header and SSL certificate verification, which allows man-in-the-middle MitM attacks. C Tenable Network Security, Inc. include"compat.inc"; if...
UBUNTU-CVE-2015-0799
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header...
FreeBSD : mozilla -- multiple vulnerabilities (b8321d76-24e7-4b72-a01d-d12c4445d826)
The Mozilla Project reports : MFSA 2015-44 Certificate verification bypass through the HTTP/2 Alt-Svc header MFSA 2015-43 Loading privileged content through Reader mode %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Firefox < 37.0.1 HTTP/2 Alt-Svc Header Certificate Verification Bypass (Mac OS X)
The version of Firefox installed on the remote Mac OS X host is prior to 37.0.1. It is, therefore, affected by an error related to the HTTP/2 'Alt-Svc' header and SSL certificate verification, which allows man-in-the-middle MitM attacks. C Tenable Network Security, Inc. include"compat.inc"; if...
Firefox 37 arrives with Opportunistic Encryption support
Mozilla has rolled out the latest Version 37 of its Firefox browser for Windows desktop, Mac, Linux and Android operating systems. The new release also adds patches for 13 different security advisories along with some new security improvements as well as user-experience features. The biggest...
PT-2015-1050
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 37.0.1 Description The issue allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server. This is achieved by specifying the server in the uri-host field of a...
Certificate verification bypass through the HTTP/2 Alt-Svc header — Mozilla
Security researcher Muneaki Nishimura discovered a flaw in the Mozilla's HTTP Alternative Services implementation. If an Alt-Svc header is specified in the HTTP/2 response, SSL certificate verification can be bypassed for the specified alternate server. As a result of this, warnings of invalid SS...
mozilla -- multiple vulnerabilities
The Mozilla Project reports: MFSA 2015-44 Certificate verification bypass through the HTTP/2 Alt-Svc header MFSA 2015-43 Loading privileged content through Reader mode...
Raspberry Pi Linux/ARM - execve"/bin/sh", 0, 0 vars 30 bytes
Raspberry Pi Linux/ARM - execve"/bin/sh", 0, 0 vars 30 bytes. Shellcode exploit for arm platform / Title: Linux/ARM - execve"/bin/sh", 0, 0 vars - 30 bytes Date: 2012-09-08 Tested on: ARM1176JZF-S v6l Author: midnitesnake 00008054 : 8054: e28f6001 add r6, pc, 1 8058: e12fff16 bx r6 805c: 4678 mov...
PT-2012-1065
Name of the Vulnerable Software and Affected Versions glibc versions 2.3.4 glibc-common versions 2.3.4 glibc-devel versions 2.3.4 glibc-headers versions 2.3.4 glibc-profile versions 2.3.4 glibc-utils versions 2.3.4 nptl-devel versions 2.3.4 Description The issue affects the glibc package in Red H...
SVC Webdesign SQL Injection
By : CR9 Greetz : Perspicacious Hackers In The World . ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : SVC Webdesign SQL Injection Vulnerability Vendor : http://www.svc.ro Author : CR9 Home : Http://Nopotm.ir Archive : Http://Nopotm.ir/forums Email : [email protected]...
PT-2011-2950
Name of the Vulnerable Software and Affected Versions IBM solidDB versions 4.5.x through 4.5.181 IBM solidDB versions 6.0.x through 6.0.1068 IBM solidDB versions 6.1.x through 6.3.48 IBM solidDB versions 6.3.x through 6.3.48 IBM solidDB versions 6.5.x through 6.5.0.3 Description The issue arises...
PT-2011-2579
Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.32 on Red Hat Enterprise Linux RHEL 6 Description A use-after-free issue in the RPC server sockets functionality of the Linux kernel might allow remote attackers to cause a denial of service via malformed data in a...
linux/ARM - setuid(0) & execve("/bin/sh","/bin/sh",0) - 38 bytes
Exploit for linux/x86 platform in category shellcode ================================================================ linux/ARM - setuid0 & execve"/bin/sh","/bin/sh",0 - 38 bytes ================================================================ / Title: Linux/ARM - setuid0 &...
Linux Kernel 'atm module' Local Denial of Service
net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service kernel infinite loop by making two calls to svclisten for the same socket, and then reading a /proc/net/atm/vc file, related to corruption of the vcc table...
[Full-disclosure] CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability CA Vulnerability ID: 34013 CA Advisory Date: 2006-05-02 Discovered By: IBM Global Services Impact: Local attacker can gain escalated privileges. Summary: A potential...
CVE-2005-2870
Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DHCP responses...
CVE-2005-2870
Solaris 10 is affected by CVE-2005-2870 in the net-svc DHCP client. The vulnerability stems from improper sanitization of data in DHCP replies, allowing remote authenticated users to execute arbitrary code on a DHCP client. The referenced patches to mitigate the issue are Sun patch 119593-01 for ...
