micknのブックマーク - はてなブックマーク

Full Disclosure: Re: Critical bash vulnerability CVE-2014-6271

mickn 2014/09/26

shellshock

リンク

oss-sec: Re: CVE-2014-6271: remote code execution through bash

mickn 2014/09/25

続き

リンク

oss-sec: Re: CVE-2014-6271: remote code execution through bash

mickn 2014/09/25

CVE-2014-3659

リンク

oss-sec: CVE-2014-4699: Linux ptrace bug

mickn 2014/07/06

リンク

oss-sec: Re: CVE Request: OpenSSL NULL pointer dereference in do_ssl3_write

Re: CVE Request: OpenSSL NULL pointer dereference in do_ssl3_write From: Theo de Raadt <deraadt () cvs openbsd org> Date: Fri, 02 May 2014 14:33:12 -0600 On 05/02/2014 09:30 AM, Marc Deslauriers wrote: Hello, A null pointer dereference bug was discovered in so_ssl3_write(). An attacker could possibly use this to cause OpenSSL to crash, resulting in a denial of service. http://rt.openssl.org/Ticket

mickn 2014/06/06

リンク

oss-sec: Linux kernel futex local privilege escalation (CVE-2014-3153)

mickn 2014/06/06

リンク

oss-sec: Re: [SECURITY] [DSA 2826-1] denyhosts security update

Re: [SECURITY] [DSA 2826-1] denyhosts security update From: Helmut Grohne <helmut () subdivi de> Date: Sun, 22 Dec 2013 19:51:29 +0100 On Sun, Dec 22, 2013 at 07:26:15PM +0100, Yves-Alexis Perez wrote: Helmut Grohne discovered that denyhosts, a tool preventing SSH brute-force attacks, could be used to perform remote denial of service against the SSH daemon. Incorrectly specified regular expression