CVE-2016-1245

It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent...

CVE-2016-1245

Removed by vendor...

[SECURITY] Fedora 25 Update: quagga-0.99.24.1-5.fc25

Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...

signup.zebra.com XSS vulnerability

Vulnerable URL: https://signup.zebra.com/register.html?appId=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

[SECURITY] Fedora 25 Update: quagga-0.99.24.1-4.fc25

Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...

Updated quagga packages fix security vulnerability

It was discovered that the zebra daemon in the Quagga routing suite suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages CVE-2016-1245...

[SECURITY] Fedora 23 Update: quagga-0.99.24.1-3.fc23

Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...

[SECURITY] Fedora 24 Update: quagga-0.99.24.1-4.fc24

Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...

openSUSE Security Update : quagga (openSUSE-2016-1233)

This update for quagga fixes the following issue : - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code. bsc1005258. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE: Security Advisory for quagga (openSUSE-SU-2016:2646-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for quagga (important)

This update for quagga fixes the following issue: - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code. bsc1005258...

SUSE SLES11 Security Update : quagga (SUSE-SU-2016:2569-1)

This update for quagga fixes the following issues : - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code bsc1005258. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : quagga (SUSE-SU-2016:2618-1)

This update for quagga fixes the following issue : - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code bsc1005258. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

[SECURITY] [DSA 3695-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3695-1 [email protected] https://www.debian.org/security/ Florian Weimer October 18, 2016 https://www.debian.org/security/faq -...

DSA-3695-1 quagga - security update

Bulletin has no description...

UBUNTU-CVE-2016-1245

It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent...

Navis WebAccess - SQL injection vulnerability

No description provided by source. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Product - Navis WebAccess - SQL Injection Date - 8/8/2016 Author - bRpsd Skype: vegnox Vendor HomePage - http://www.navis.com/ Product Download - http://navis.com/prwebaccess.jsp currently under...

zFTP Client 20061220 - Connection Name Local Buffer Overflow

zFTP Client 20061220 - Connection Name Local Buffer Overflow Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: zFTP Client Affected value: NAME under FTP connection Where in the code: Line 30 in strcpychk.c...

zFTP Client 20061220 - 'Connection Name' Local Buffer Overflow

Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: zFTP Client Affected value: NAME under FTP connection Where in the code: Line 30 in strcpychk.c strcpychk dest=0xb7f811c0 "/KUIP", src=0xb76a6680 "/MACRO",...

zFTP 20061220+dfsg3-4.1 Buffer Overflow

Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: zFTP Client Affected value: NAME under FTP connection Where in the code: Line 30 in strcpychk.c strcpychk dest=0xb7f811c0 "/KUIP", src=0xb76a6680 "/MACRO",...