187 matches found
Low: Red Hat Security Advisory: busybox security and bug fix update
Updated busybox packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Dahua DVR authentication bypass
Some commands may be executed without authentication via TCP/37777 protocol...
Mandriva Linux Security Advisory : dnsmasq (MDVSA-2013:072)
Updated dnsmasq packages fix security vulnerabilities : When dnsmasq before 2.63 is used in conjunctions with certain configurations of libvirtd, network packets from prohibited networks e.g. packets that should not be passed in may be sent to the dnsmasq application and processed. This can resul...
PHP vulnerabilities of the session session hijacking-vulnerability warning-the black bar safety net
This article mainly introduced for the PHP website, Session hijacking. session hijacking is a more complex attack methods. Most of the Internet on the computer more there is to attack danger. This is a hijacking of the tcp Protocol, so almost all of the LAN, there is the hijacking possible. The...
CVE-2013-0075
The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service reboot via a crafted packet that terminates a TCP connection, aka "TCP FIN...
[SECURITY] Fedora 15 Update: net6-1.3.14-1.fc15
net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...
[SECURITY] Fedora 14 Update: net6-1.3.14-1.fc14
net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...
[SECURITY] Fedora 16 Update: net6-1.3.14-1.fc16
net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...
Fedora Update for net6 FEDORA-2011-15326
Check for the Version of net6 OpenVAS Vulnerability Test Fedora Update for net6 FEDORA-2011-15326 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Fedora Update for net6 FEDORA-2011-15332
Check for the Version of net6 OpenVAS Vulnerability Test Fedora Update for net6 FEDORA-2011-15332 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Debian DSA-2303-2 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-1020 Kees Cook discovered an issue in the /proc filesystem that allows loc...
Microsoft Host Integration Server多个拒绝服务漏洞
Bugtraq ID: 47315 Microsoft Host Integration Server是一款主机平台互通解决方案。 -使用TCP协议的如1478端口上的snabase.exe，使用动态端口的snalink.exe，snaservr.exe, mngagent.exe等，"wordpacket - 2"可使应用程序进入无限循环，持续解析相同数据。 -访问最大0x1ee字节报文之后的未分配内存可导致进程崩溃。 -超过0x1ee字节的UDP报文可阻止接收任何其他UDP报文。 -字符串过大可导致异常。 -如果字符串超过0x10字节，服务器会触发异常终止。 Microsoft Ho...
Microsoft Host Integration Server 8.5.4224.0 - Denial of Service
Microsoft Host Integration Server 8.5.4224.0 - Denial of Service Source: http://aluigi.org/adv/snabase1-adv.txt Luigi Auriemma Application: Microsoft Host Integration Server http://www.microsoft.com/biztalk/en/us/host-integration.aspx?pf=true Versions: = 8.5.4224.0 Platforms: Windows Bugs: variou...
Synergy 1.4 Protocol Cleartext Weakness Proof Of Concept
Exploit Title: Synergy Protocol cleartext weakness PoC Date:April 5th 2011 Author: Sw1tCh Software Link: http://synergy-foss.org/ Version: 1.4 -= Info =- Synergy is Free and Open Source Software that lets you easily share your mouse and keyboard between multiple computers, where each computer has...
HP Data Protector Media Operations - Null Pointer Dereference Remote Denial of Service
HP Data Protector Media Operations - Null Pointer Dereference Remote Denial of Service !/usr/bin/python import socket,struct,sys,os SIGN=0x04030201 cmd=0x01000000 def main: if lensys.argv!=2: print"\nx Usage: python "+sys.argv0+" \n" sys.exit0 else: host=sys.argv1,19813 default port TCP/19813 if...
rpc.ttdbserverd x86 Proof Of Concept Exploit
Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - RPC TTDB .rec parser Heap Overflow thrjmptable does not exist on Solaris 10 u8 See the SPARC version of this exploit to see how to specify other addresses to be overwritten use POSIX; use IO::Socket; use...
SIP Endpoint Scanner (TCP)
Scan for SIP devices using OPTIONS requests This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Endpoint Scanner TCP', 'Description' = 'Scan for SIP devices using OPTIONS requests', 'Author' =...
NetSarang Xftp 3.0 PWD响应栈溢出漏洞
BUGTRAQ ID: 39628 Xftp是Windows平台上使用的SFTP、FTP文件传输程序。 如果Xftp客户端受骗连接到了恶意的FTP服务器或打开了特制的.xfp会话文件并发送了超长命令的话，则在处理服务器返回的PWD响应时就可能触发栈溢出，导致执行任意代码。 NetSarang Xftp 3.0 厂商补丁： NetSarang --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netsarang.com/ Exploit Title: Xftp client 3.0 PWD Remote...
