Monthly Archives: December 2015

NVD

CVE-2015-6538

The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote attackers to conduct LDAP injection attacks, and consequently bypass intended access restrictions, via a crafted URL.

NVD

CVE-2015-7665

Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command. NOTE: within wget itself, the automatic fallback is not considered a vulnerability by CVE.

NVD

CVE-2015-7783

Cross-site scripting (XSS) vulnerability in Let’s PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Full Disclosure

Re: Executable installers are vulnerable^WEVIL (case 15): F-SecureOnlineScanner.exe allows arbitrary (remote) code execution and escalation of privilege

Posted by Stefan Kanthak on Dec 26

“Shawn McMahon” <syberghost () gmail com> wrote:

0. why was F-Secure able to fix their bugs in their program?

1. which of the DLLs are loaded by the OS, which are loaded by their program?

2. what’s (not) wrong with
a) the OS?
b) <https://blogs.msdn.microsoft.com/oldnewthing/20101111-00/?p=12303>?
c) ALL executable installers and self-extractors?
d) <https://cwe.mitre.org/data/definitions/426.html>…

Full Disclosure

libtiff: invalid write (CVE-2015-7554)

Posted by Hans Jerry Illikainen on Dec 26

`_TIFFVGetField()’ in libtiff-4.0.6 may write field data for certain
extension tags to invalid or possibly arbitrary memory.

Each tag has a `field_passcount’ variable in their TIFFField struct:

tiff-4.0.6/libtiff/tif_dir.h #276..289:
,—-
| struct _TIFFField {
| uint32 field_tag; /* field’s tag */
| short field_readcount; /* read count/TIFF_VARIABLE/TIFF_SPP */
| short…

Full Disclosure

EasyCafe Server <= 2.2.14 Remote File Read

Posted by Rio Sherri on Dec 26

# Title : EasyCafe Server <= 2.2.14 Remote File Read
# Date : 25/12/2015
# Author : R-73eN
# Tested on : Windows 7 Ultimate
# Software Link : http://www.tinasoft.com/easycafe/
# Vulnerable Versions : EasyCafe Server <= 2.2.14
# EasyCafe Server has a feature to upload file from the server to a client.
# And the request is as following. EasyCafe Server sends an UDP request to
the client with the file that wants to upload,
# Then the client…