helmut grohne vulnerabilities and exploits

(subscribe to this query)

denyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which allows remote malicious users to cause a denial of service (incorrect block of IP addresses) via crafted login names.

Fedoraproject Fedora Debian Debian Linux 7.0 Debian Debian Linux 7.1 Debian Debian Linux 6.0 Phil Schwartz Denyhosts 2.6

1 EDB exploit

(1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3) deb-specific/fileforge.pl, (4) deb-specific/group_dump_update.pl, (5) deb-specific/ssh_dump_update.pl, (6) deb-specific/user_dump_update.pl, (7) plugins/scmbzr/common/BzrPlugin.class.php, (8) plugins/scmcvs/com...

Fusionforge Fusionforge 5.2 Fusionforge Fusionforge 5.1 Fusionforge Fusionforge 5.0

The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0 branches (and possibly other branch...

Heimdal Project Heimdal 7.8.0 Heimdal Project Heimdal 7.7.1

acpid.c in acpid prior to 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but...

Tedfelix Acpid 2.0.3 Tedfelix Acpid 2.0.5 Tedfelix Acpid 2.06 Tedfelix Acpid 2.0.7 Tedfelix Acpid Tedfelix Acpid 1.0.8 Tedfelix Acpid 1.0.10 Tedfelix Acpid 2.0.0 Tedfelix Acpid 2.0.1 Tedfelix Acpid 2.0.2 Tedfelix Acpid 2.0.4

1 EDB exploit

event.c in acpid (aka acpid2) prior to 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to (1) perform write operations within directories created by a script, or (2) read files created by a script, via sta...

Tedfelix Acpid2 Tedfelix Acpid2 2.0.3 Tedfelix Acpid2 2.0.2 Tedfelix Acpid2 2.0.9 Tedfelix Acpid2 2.0.8 Tedfelix Acpid2 2.0.1 Tedfelix Acpid2 2.0.0 Tedfelix Acpid2 2.0.7 Tedfelix Acpid2 2.0.6 Tedfelix Acpid2 2.0.5 Tedfelix Acpid2 2.0.4

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory w...

Samba Samba Fedoraproject Fedora 36 Fedoraproject Fedora 37

cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote malicious users to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted H...

Munin-monitoring Munin 2.0 Munin-monitoring Munin 2.1

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook