jetlib.sec » Tags » hash-values

Feeds

133442 items (9 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db) (6 unread)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities (3 unread)
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

20 items tagged "hash values"

Related tags: mandriva linux [+], ubuntu [+], security [+], php [+], mandriva [+], linux [+], hash [+], hash table [+], notice [+], denial of service [+], security notice [+], proof of concept [+], integer overflow [+], input variables [+], hash collision [+], exif [+], configuration php [+], collision [+], validate [+], r. okajima [+], mario mikocevic [+], invalid parameters [+], gfs [+], function [+], dan rosenberg [+], chris guo [+], brad spengler [+], andre osterhues [+], jetty [+]

• April 26, 2012
• 15:10

  Ubuntu Security Notice USN-1429-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1429-1 - It was discovered that Jetty computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. This could allow a remote attacker to cause a denial of service by sending many crafted parameters.

  Tags:  ubuntu notice security jetty hash-values denial-of-service  

• February 28, 2012
• 7:15

  Mandriva Linux Security Advisory 2012-024

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2012-024 - Ruby before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service via crafted input to an application that maintains a hash table. The updated packages have been patched to correct this issue.

  Tags:  mandriva-linux hash-values hash-table  

• 7:15

  Mandriva Linux Security Advisory 2012-024

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2012-024 - Ruby before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service via crafted input to an application that maintains a hash table. The updated packages have been patched to correct this issue.

  Tags:  mandriva-linux hash-values hash-table  

• February 14, 2012
• 16:06

  Mandriva Linux Security Advisory 2012-019

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2012-019 - tables/apr_hash.c in the Apache Portable Runtime library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service via crafted input to an application that maintains a hash table. APR has been upgraded to the latest version which holds many improvements over the previous versions and is not vulnerable to this issue.

  Tags:  mandriva hash linux mandriva-linux hash-values hash-table  

• 16:06

  Mandriva Linux Security Advisory 2012-019

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2012-019 - tables/apr_hash.c in the Apache Portable Runtime library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service via crafted input to an application that maintains a hash table. APR has been upgraded to the latest version which holds many improvements over the previous versions and is not vulnerable to this issue.

  Tags:  mandriva hash linux mandriva-linux hash-values hash-table  

• 16:06

  Mandriva Linux Security Advisory 2012-019

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2012-019 - tables/apr_hash.c in the Apache Portable Runtime library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service via crafted input to an application that maintains a hash table. APR has been upgraded to the latest version which holds many improvements over the previous versions and is not vulnerable to this issue.

  Tags:  mandriva hash linux mandriva-linux hash-values hash-table  

• February 13, 2012
• 13:10

  Ubuntu Security Notice USN-1359-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1359-1 - It was discovered that Tomcat incorrectly performed certain caching and recycling operations. A remote attacker could use this flaw to obtain read access to IP address and HTTP header information in certain cases. This issue only applied to Ubuntu 11.10. It was discovered that Tomcat computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. A remote attacker could cause a denial of service by sending many crafted parameters. Various other issues were also addressed.

  Tags:  ubuntu notice security hash-values denial-of-service security-notice  

• 13:10

  Ubuntu Security Notice USN-1359-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1359-1 - It was discovered that Tomcat incorrectly performed certain caching and recycling operations. A remote attacker could use this flaw to obtain read access to IP address and HTTP header information in certain cases. This issue only applied to Ubuntu 11.10. It was discovered that Tomcat computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. A remote attacker could cause a denial of service by sending many crafted parameters. Various other issues were also addressed.

  Tags:  ubuntu notice security hash-values denial-of-service security-notice  

• 13:10

  Ubuntu Security Notice USN-1359-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1359-1 - It was discovered that Tomcat incorrectly performed certain caching and recycling operations. A remote attacker could use this flaw to obtain read access to IP address and HTTP header information in certain cases. This issue only applied to Ubuntu 11.10. It was discovered that Tomcat computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. A remote attacker could cause a denial of service by sending many crafted parameters. Various other issues were also addressed.

  Tags:  ubuntu notice security hash-values denial-of-service security-notice  

• February 09, 2012
• 23:46

  Ubuntu Security Notice USN-1358-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1358-1 - It was discovered that PHP computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. This could allow a remote attacker to cause a denial of service by sending many crafted parameters. ATTENTION: this update changes previous PHP behavior by limiting the number of external input variables to 1000. This may be increased by adding a "max_input_vars" directive to the php.ini configuration file. See http://www.php.net/manual/en/info.configuration.php#ini.max-input-vars for more information. Various other issues were also addressed.

  Tags:  ubuntu php security hash-values input-variables configuration-php  

• 23:46

  Ubuntu Security Notice USN-1358-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1358-1 - It was discovered that PHP computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. This could allow a remote attacker to cause a denial of service by sending many crafted parameters. ATTENTION: this update changes previous PHP behavior by limiting the number of external input variables to 1000. This may be increased by adding a "max_input_vars" directive to the php.ini configuration file. See http://www.php.net/manual/en/info.configuration.php#ini.max-input-vars for more information. Various other issues were also addressed.

  Tags:  ubuntu php security hash-values input-variables configuration-php  

• 23:46

  Ubuntu Security Notice USN-1358-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1358-1 - It was discovered that PHP computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. This could allow a remote attacker to cause a denial of service by sending many crafted parameters. ATTENTION: this update changes previous PHP behavior by limiting the number of external input variables to 1000. This may be increased by adding a "max_input_vars" directive to the php.ini configuration file. See http://www.php.net/manual/en/info.configuration.php#ini.max-input-vars for more information. Various other issues were also addressed.

  Tags:  ubuntu php security hash-values input-variables configuration-php  

• January 04, 2012
• 13:14

  PHP 4 Hash Collision Proof Of Concept

   » ‎ Packet Storm Security Exploits
  PHP 4 hash collision proof of concept code that computes hash values for form parameters.

  Tags:  php hash collision hash-collision hash-values proof-of-concept  

• 13:14

  PHP 4 Hash Collision Proof Of Concept

   » ‎ Packet Storm Security Recent Files
  PHP 4 hash collision proof of concept code that computes hash values for form parameters.

  Tags:  php hash collision hash-collision hash-values proof-of-concept  

• 13:14

  PHP 4 Hash Collision Proof Of Concept

   » ‎ Packet Storm Security Misc. Files
  PHP 4 hash collision proof of concept code that computes hash values for form parameters.

  Tags:  php hash collision hash-collision hash-values proof-of-concept  

• December 30, 2011
• 9:22

  Mandriva Linux Security Advisory 2011-197

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-197 - Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708. PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service by sending many crafted parameters. The updated packages have been patched to correct this issue.

  Tags:  mandriva linux exif mandriva-linux hash-values integer-overflow  

• 9:22

  Mandriva Linux Security Advisory 2011-197

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-197 - Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708. PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service by sending many crafted parameters. The updated packages have been patched to correct this issue.

  Tags:  mandriva linux exif mandriva-linux hash-values integer-overflow  

• 9:22

  Mandriva Linux Security Advisory 2011-197

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-197 - Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708. PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service by sending many crafted parameters. The updated packages have been patched to correct this issue.

  Tags:  mandriva linux exif mandriva-linux hash-values integer-overflow  

• August 06, 2010
• 10:02

  USN-966-1.txt

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 966-1 - Junjiro R. Okajima discovered that knfsd did not correctly handle strict overcommit. Chris Guo, Jukka Taimisto, and Olli Jarva discovered that SCTP did not correctly handle invalid parameters. A remote attacker could send specially crafted traffic that could crash the system, leading to a denial of service. Mario Mikocevic discovered that GFS2 did not correctly handle certain quota structures. Toshiyuki Okajima discovered that the kernel keyring did not correctly handle dead keyrings. Brad Spengler discovered that Sparc did not correctly implement non-executable stacks. This made userspace applications vulnerable to exploits that would have been otherwise blocked due to non-executable memory protections. Dan Rosenberg discovered that the btrfs clone function did not correctly validate permissions. Dan Rosenberg discovered that GFS2 set_flags function did not correctly validate permissions. Shi Weihua discovered that btrfs xattr_set_acl function did not correctly validate permissions. Andre Osterhues discovered that eCryptfs did not correctly calculate hash values.

  Tags:  function validate gfs brad-spengler andre-osterhues mario-mikocevic r.-okajima chris-guo dan-rosenberg invalid-parameters hash-values  

• 10:00

  USN-966-1.txt

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 966-1 - Junjiro R. Okajima discovered that knfsd did not correctly handle strict overcommit. Chris Guo, Jukka Taimisto, and Olli Jarva discovered that SCTP did not correctly handle invalid parameters. A remote attacker could send specially crafted traffic that could crash the system, leading to a denial of service. Mario Mikocevic discovered that GFS2 did not correctly handle certain quota structures. Toshiyuki Okajima discovered that the kernel keyring did not correctly handle dead keyrings. Brad Spengler discovered that Sparc did not correctly implement non-executable stacks. This made userspace applications vulnerable to exploits that would have been otherwise blocked due to non-executable memory protections. Dan Rosenberg discovered that the btrfs clone function did not correctly validate permissions. Dan Rosenberg discovered that GFS2 set_flags function did not correctly validate permissions. Shi Weihua discovered that btrfs xattr_set_acl function did not correctly validate permissions. Andre Osterhues discovered that eCryptfs did not correctly calculate hash values.

  Tags:  function validate gfs brad-spengler andre-osterhues mario-mikocevic r.-okajima chris-guo dan-rosenberg invalid-parameters hash-values