jetlib.sec » Tags » master

Feeds

133363 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

21 items tagged "master"

Related tags: x 509 [+], ubuntu [+], puppet master [+], puppet [+], man in the middle attack [+], hacks [+], perfect [+], pdf [+], passwd [+], libraries [+], execve [+], bin [+], hp enterprise [+], enterprise [+], cluster [+], toy [+], system [+], softap [+], security [+], scottish [+], safer use [+], root [+], robot [+], red bull [+], ray [+], programmable microcontrollers [+], privilege escalation vulnerability [+], pour [+], potential security vulnerability [+], pastebin [+], passwords [+], optical device [+], oliver [+], mode [+], master mode [+], master clock [+], logic chips [+], lcd screens [+], kegerator [+], high [+], hdcp [+], goodness [+], escalation [+], encryption protocol [+], digital [+], content protection [+], clock [+], camera rig [+], botnet [+], beer [+], atheros ar5007 [+], art of [+], arduino [+], Wireless [+]

• January 15, 2012
• 18:40

  BSD/x86 execve ('/bin/sh -c "/etc/master.passwd"') setreuid(0,0) Shellcode

   » ‎ Packet Storm Security Recent Files
  94 bytes small BSD/x86 execve ('/bin/sh -c "/etc/master.passwd"') setreuid(0,0) shellcode.

  Tags:  master bin execve passwd  

• 18:40

  BSD/x86 execve ('/bin/sh -c "/etc/master.passwd"') setreuid(0,0) Shellcode

   » ‎ Packet Storm Security Misc. Files
  94 bytes small BSD/x86 execve ('/bin/sh -c "/etc/master.passwd"') setreuid(0,0) shellcode.

  Tags:  master bin execve passwd  

• 14:00

  [bsd/x86] - bsd/x86 execve ('/bin/sh -c "/etc/master.passwd"') setreuid(0,0) 94 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [bsd/x86] - bsd/x86 execve ('/bin/sh -c "/etc/master.passwd"') setreuid(0,0) 94 bytes

  Tags:  master bin execve passwd  

• December 26, 2011
• 6:58

  How To Master The Art Of Passwords

   » ‎ Packet Storm Security Headlines
  How To Master The Art Of Passwords

  Tags:  master passwords art-of  

• October 25, 2011
• 15:51

  Ubuntu Security Notice USN-1238-2

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1238-2 - USN-1238-1 fixed vulnerabilities in Puppet. The upstream patch introduced a regression in Ubuntu 11.04 when executing certain commands. This update fixes the problem. It was discovered that Puppet incorrectly handled the non-default "certdnsnames" option when generating certificates. If this setting was added to puppet.conf, the puppet master's DNS alt names were added to the X.509 Subject Alternative Name field of all certificates, not just the puppet master's certificate. An attacker that has an incorrect agent certificate in his possession can use it to impersonate the puppet master in a man-in-the-middle attack.

  Tags:  master ubuntu puppet puppet-master man-in-the-middle-attack x-509  

• 15:51

  Ubuntu Security Notice USN-1238-2

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1238-2 - USN-1238-1 fixed vulnerabilities in Puppet. The upstream patch introduced a regression in Ubuntu 11.04 when executing certain commands. This update fixes the problem. It was discovered that Puppet incorrectly handled the non-default "certdnsnames" option when generating certificates. If this setting was added to puppet.conf, the puppet master's DNS alt names were added to the X.509 Subject Alternative Name field of all certificates, not just the puppet master's certificate. An attacker that has an incorrect agent certificate in his possession can use it to impersonate the puppet master in a man-in-the-middle attack.

  Tags:  master ubuntu puppet puppet-master man-in-the-middle-attack x-509  

• 15:51

  Ubuntu Security Notice USN-1238-2

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1238-2 - USN-1238-1 fixed vulnerabilities in Puppet. The upstream patch introduced a regression in Ubuntu 11.04 when executing certain commands. This update fixes the problem. It was discovered that Puppet incorrectly handled the non-default "certdnsnames" option when generating certificates. If this setting was added to puppet.conf, the puppet master's DNS alt names were added to the X.509 Subject Alternative Name field of all certificates, not just the puppet master's certificate. An attacker that has an incorrect agent certificate in his possession can use it to impersonate the puppet master in a man-in-the-middle attack.

  Tags:  master ubuntu puppet puppet-master man-in-the-middle-attack x-509  

• October 24, 2011
• 19:01

  Ubuntu Security Notice USN-1238-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1238-1 - It was discovered that Puppet incorrectly handled the non-default "certdnsnames" option when generating certificates. If this setting was added to puppet.conf, the puppet master's DNS alt names were added to the X.509 Subject Alternative Name field of all certificates, not just the puppet master's certificate. An attacker that has an incorrect agent certificate in his possession can use it to impersonate the puppet master in a man-in-the-middle attack.

  Tags:  master ubuntu puppet puppet-master man-in-the-middle-attack x-509  

• 19:01

  Ubuntu Security Notice USN-1238-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1238-1 - It was discovered that Puppet incorrectly handled the non-default "certdnsnames" option when generating certificates. If this setting was added to puppet.conf, the puppet master's DNS alt names were added to the X.509 Subject Alternative Name field of all certificates, not just the puppet master's certificate. An attacker that has an incorrect agent certificate in his possession can use it to impersonate the puppet master in a man-in-the-middle attack.

  Tags:  master ubuntu puppet puppet-master man-in-the-middle-attack x-509  

• 19:01

  Ubuntu Security Notice USN-1238-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1238-1 - It was discovered that Puppet incorrectly handled the non-default "certdnsnames" option when generating certificates. If this setting was added to puppet.conf, the puppet master's DNS alt names were added to the X.509 Subject Alternative Name field of all certificates, not just the puppet master's certificate. An attacker that has an incorrect agent certificate in his possession can use it to impersonate the puppet master in a man-in-the-middle attack.

  Tags:  master ubuntu puppet puppet-master man-in-the-middle-attack x-509  

• June 19, 2011
• 13:33

  Perfect PDF 7 Master / Reader Insecure Libraries

   » ‎ Packet Storm Security Advisories
  Perfect PDF 7 Master and Reader both ship with outdated and vulnerable libraries.

  Tags:  master pdf perfect libraries  

• 13:33

  Perfect PDF 7 Master / Reader Insecure Libraries

   » ‎ Packet Storm Security Recent Files
  Perfect PDF 7 Master and Reader both ship with outdated and vulnerable libraries.

  Tags:  master pdf perfect libraries  

• 13:33

  Perfect PDF 7 Master / Reader Insecure Libraries

   » ‎ Packet Storm Security Misc. Files
  Perfect PDF 7 Master and Reader both ship with outdated and vulnerable libraries.

  Tags:  master pdf perfect libraries  

• June 18, 2011
• 12:00

  The Perfect Beer Every Time

   » ‎ Hack a Day
    The Pour Master Pro is a beer pouring robot, designed and built by a team of beer/robot lovers as their entry to the Red Bull’s Creation Contest. Pour Master keeps it simple (opposed to some of the other bar bots we have seen), it uses a modified kegerator and tap for the beer, and [...]

  Tags:  master pour beer kegerator red-bull robot arduino hacks  

• November 23, 2010
• 9:16

  Scottish Botnet Master Jailed For 18 Months

   » ‎ Packet Storm Security Headlines
  Scottish Botnet Master Jailed For 18 Months

  Tags:  botnet master scottish  

• October 17, 2010
• 12:00

  Master clock system uses all logic, no microcontrollers

   » ‎ Hack a Day
  What you see above is a master clock. It is the center of a system that can run an unlimited number of slave clocks, keeping them on-time thanks to its ability to synchronize with an atomic clock. [Brett Oliver] put together the project back in 2005 using digital logic chips, and no programmable microcontrollers. This [...]

  Tags:  master clock system oliver programmable-microcontrollers logic-chips master-clock hacks  

• September 24, 2010
• 9:30

  The HDCP master key

   » ‎ Hack a Day
  Pastebin has the HDCP master key that we talked about in a post last week. This is the encryption protocol used for HDMI content protection on media such as Blu-Ray and High Definition cable television. The master key array is a 40×40 set of 56-bit hex used to generate the key sets. You get one [...]

  Tags:  pastebin master hdcp ray high encryption-protocol content-protection security hacks  

• August 24, 2010
• 11:00

  Digital View-Master

   » ‎ Hack a Day
  Who could forget the stereoscopic goodness of a View-Master? [Tuttle] put a modern flair on the classic optical device by adding two 1.5″ LCD screens. The screens replace the film disk of the original, showing slightly different images to produce a 3D effect. No word on a camera rig used to take the original images, [...]

  Tags:  digital master goodness camera-rig lcd-screens optical-device toy hacks  

• March 18, 2010
• 22:03

  HP Enterprise Cluster Master Toolkit Local Unauthorized Access

   » ‎ SecuriTeam
  A potential security vulnerability has been identified on HP Enterprise Cluster Master Toolkit (ECMT) version B.05.00 running on HP-UX.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  cluster master enterprise potential-security-vulnerability hp-enterprise safer-use  

• March 07, 2010
• 14:20

  Atheros in master mode AP doesn't work in BT4F?

   » ‎ remote-exploit & backtrack
  Hi all, BT4 Final is great! But creating a fake AP in master mode on my atheros ar5007 doesn't seem to work. I like master mode for its great AP speeds. I can't get a softAP over 5kB/s, no matter what MTU I try.
  I'm using nick_the_greek's great wlan_nick script, as an aid in creating them. master mode in bt4pf was like I had a 50+kB/s normal AP, low latency and everything.
  ath5k drivers don't support master mode. Now I tried the latest madwifi-ng drivers. I can make an ath0 VAP in master mode, but when I try starting airbase, it fails:
  Code: madwifi-ng drivers:
root@bt:~# wlanconfig ath0 destroy
root@bt:~# ip link set dev wifi0 down
root@bt:~# wlanconfig ath0 create wlandev wifi0 wlanmode master
root@bt:~# iwconfig | grep "Mode:"
ath0      Mode:Master

root@bt:~# airbase-ng ath0
ioctl(SIOCSIWMODE) failed: Invalid argument

root@bt:~# airbase-ng wifi0 (works fine) Code: ath5k drivers:
root@bt:~# ifconfig wlan0 down
root@bt:~# iwconfig wlan0 mode master
Error for wireless request "Set Mode" (8B06) :
    SET failed on device wlan0 ; Invalid argument
root@bt:~# iwconfig wlan0 mode managed  (works fine) So for some reason with BT4F, I can only create a softap on wlan0, mon0 or wifi0, but can't create a master mode AP. Am I overlooking somthing?
  With BT4 PF and beta it seemed to work fine tho...
  Ideas anyone?..

  Tags:  mode master root master-mode softap atheros-ar5007 Wireless  

• February 02, 2010
• 0:00

  Vuln: HP Enterprise Cluster Master Toolkit Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  HP Enterprise Cluster Master Toolkit Privilege Escalation Vulnerability

  Tags:  cluster master enterprise privilege-escalation-vulnerability hp-enterprise escalation