CVE-2016-9201

A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. More Information: CSCuz21015. Known Affected Releases: 15.33M3. Known Fixed...

CVE-2016-9201

A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. More Information: CSCuz21015. Known Affected Releases: 15.33M3. Known Fixed...

Design/Logic Flaw

A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. More Information: CSCuz21015. Known Affected Releases: 15.33M3. Known Fixed...

CVE-2016-9201

Cisco IOS and IOS XE Zone-Based Firewall (ZBF) vulnerability (CVE-2016-9201) allows an unauthenticated, remote attacker to bypass policy and pass traffic that should be dropped. Root cause is a logic flaw in ZBF policy processing: if only one egress zone pair exists and no reverse pair, return tr...

CVE-2016-9201

A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. More Information: CSCuz21015. Known Affected Releases: 15.33M3. Known Fixed...

Cisco IOS and IOS XE Software Security Bypass Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in Cisco IOS and Cisco IOS XE Software's ZONE-based firewall allows a remote attacker to exploit the vulnerability to submit a special request for policy los...

Cisco IOS Software Zone-Based Firewall Feature Bypass Vulnerability (cisco-sa-20161207-ios-zbf)

A vulnerability in the Zone-Based Firewall feature of Cisco IOS Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...

Cisco IOS and Cisco IOS XE Software Zone-Based Firewall Feature Bypass Vulnerability

A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. The vulnerability is due to a logic flaw in a corner case scenario. An...

Debian DLA-725-1 : tzdata new upstream version

This update includes the changes in tzdata 2016j. Notable changes are : - Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00. For Debian 7 'Wheezy', these problems have been fixed in version 2016j-0+deb7u1. We recommend that you upgrade your tzdata packages. NOTE: Tenable Network...

FreeFloat FTP Server 'SITE ZONE' Command Buffer Overflow Vulnerability

Freefloat FTP Server is a free software package for uploading files and managing wired and wireless devices from the Swedish company Freefloat. A stack buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0. A remote attacker can exploit this vulnerability to execute arbitrary...

Freefloat FTP Server 1.0 - SITE ZONE Remote Buffer Overflow

Freefloat FTP Server 1.0 - SITE ZONE Remote Buffer Overflow !/usr/bin/env python -- coding: utf-8 -- Exploit Title: FreeFloat FTP Server BoF SITE ZONE Command Date: 04/11/2016 Exploit Author: Luis Noriega Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Version: 1.0 Tested...

Freefloat FTP Server 1.0 SITE ZONE Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title: FreeFloat FTP Server BoF SITE ZONE Command Date: 04/11/2016 Exploit Author: Luis Noriega Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Version: 1.0 Tested on: Windows XP Profesional V. 5.1 Service Pack 3 CVE : n/a...

West Bank and Gaza move DST end date to October 29, 2016

None None...

Revive Adserver: Reflected XSS on Zones > Invocation Code

"Cricetinae" : This report is similar to my earlier report: 170156. Short Description The Close text parameter in Inventory Zone Invocation Code is vulnerable to Cross-Site Scripting vulnerability. Steps to Reproduce 1. Logon or Work as an agent. 2. Navigate to Inventory Zones Invocation Code...

KLA10894 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10892. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

PizzaInn Beta 3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - categories-exec.php - Stored XSS Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email...

Updated pdns packages fix security vulnerability

PowerDNS Authoritative Server accepts queries with a qname's length larger than 255 bytes CVE-2016-5426. PowerDNS Authoritative Server does not properly handle dot inside labels CVE-2016-5427. These issues allow a remote, unauthenticated attacker to cause an abnormal load on the PowerDNS backend ...

DEBIAN-CVE-2016-6172

PowerDNS aka pdns Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service memory exhaustion and secondary DNS server crash via a large 1 AXFR or 2 IXFR response...

UBUNTU-CVE-2016-6172

PowerDNS aka pdns Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service memory exhaustion and secondary DNS server crash via a large 1 AXFR or 2 IXFR response...

Cisco IOS and IOS XE Software ZBFW Feature Security Bypass Vulnerability

Cisco IOS and IOS XE Software are operating systems developed by Cisco for its network devices.Zone-Based Firewall ZBFW is one of the policy firewall components. A security bypass vulnerability exists in the ZBFW feature in Cisco IOS and IOS XE Software, which stems from the program failing to...