timo lindfors vulnerabilities and exploits

(subscribe to this query)

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emac...

Openbsd Openssh 4.3p2

ssh in OpenSSH prior to 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows malicious users to violate intended policy and gain privileges by causing an X client to be treated as trusted.

Openbsd Openssh 4.3p2 Openbsd Openssh 4.3p1 Openbsd Openssh 4.0 Openbsd Openssh 4.3 Openbsd Openssh 4.2p1 Openbsd Openssh 4.4p1 Openbsd Openssh 4.4 Openbsd Openssh 4.1 Openbsd Openssh 4.0p1 Openbsd Openssh Openbsd Openssh 4.5 Openbsd Openssh 4.2 Openbsd Openssh 4.1p1

OpenSSL 0.9.8c-1 up to versions prior to 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote malicious users to conduct brute force guessing attacks against cryptographic keys.

Openssl Openssl Canonical Ubuntu Linux 7.04 Canonical Ubuntu Linux 7.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 6.06 Debian Debian Linux 4.0

3 EDB exploits22 Github repositories

JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.

Jfrog Artifactory 6.5.9

The terminal dispatcher in mosh prior to 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.

Keith Winstein Mosh 1.1.1 Keith Winstein Mosh 1.1 Keith Winstein Mosh 1.2 Keith Winstein Mosh 1.0 Keith Winstein Mosh 0.98c Keith Winstein Mosh Keith Winstein Mosh 1.1.3 Keith Winstein Mosh 1.1.2 Keith Winstein Mosh 1.1.3-2 Keith Winstein Mosh 1.1.3-1

1 EDB exploit

Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole prior to 0.6.3 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a long protocol name.

Fedoraproject Fedora 16 Fedoraproject Fedora 17 Guac-dev Guacamole Guac-dev Guacamole 0.6.0 Guac-dev Guacamole 0.5.0

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook