Информационная безопасность
[RU] switch to English


Уязвимости безопасности в cURL
дополнено с 1 февраля 2014 г.
Опубликовано:1 ноября 2015 г.
Источник:
SecurityVulns ID:13544
Тип:клиент
Уровень опасности:
7/10
Описание:При использовании NTLM-ауфентикации запрос может быть отправлен через неверное соединение. Утечки информации, DoS.
Затронутые продукты:CURL : libcurl 7.41
 CURL : cURL 7.35
CVE:CVE-2015-3237 (The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.)
 CVE-2015-3236 (cURL and libcurl 7.40.0 through 7.42.1 sends the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.)
 CVE-2015-3153 (The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.)
 CVE-2015-3148 (cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.)
 CVE-2015-3145 (The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.)
 CVE-2015-3144 (The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80.")
 CVE-2015-3143 (cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.)
 CVE-2014-0015 (cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.)
Оригинальный текстdocumentUBUNTU, [USN-2591-1] curl vulnerabilities (05.05.2015)
 documentMANDRIVA, [ MDVSA-2015:220 ] curl (04.05.2015)
 documentDEBIAN, [SECURITY] [DSA 2849-1] curl security update (01.02.2014)

Уязвимости безопасности в unzip
Опубликовано:1 ноября 2015 г.
Источник:
SecurityVulns ID:14752
Тип:библиотека
Уровень опасности:
5/10
Описание:Выполнение кода, DoS.
Затронутые продукты:UNZIP : unzip 6.0
CVE:CVE-2015-7697 (Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty bzip2 data in a ZIP archive.)
 CVE-2015-7696 (Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.)
Оригинальный текстdocumentUBUNTU, [USN-2788-1] unzip vulnerabilities (01.11.2015)

Многочисленные уязвимости безопасности в ntp
Опубликовано:1 ноября 2015 г.
Источник:
SecurityVulns ID:14751
Тип:удаленная
Уровень опасности:
8/10
Описание:Многочисленные повреждения памяти.
Затронутые продукты:NTP : ntp 4.2
CVE:CVE-2015-7871
 CVE-2015-7855
 CVE-2015-7853
 CVE-2015-7852
 CVE-2015-7850
 CVE-2015-7705
 CVE-2015-7704
 CVE-2015-7703
 CVE-2015-7702
 CVE-2015-7701
 CVE-2015-7692
 CVE-2015-7691
 CVE-2015-5300
 CVE-2015-5219
 CVE-2015-5196 (** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.)
 CVE-2015-5195
 CVE-2015-5194
Оригинальный текстdocumentUBUNTU, [USN-2783-1] NTP vulnerabilities (01.11.2015)

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород