You are here

JC3 Medium Impact Assessment Bulletins

August 3, 2012
U-227: bind-dyndb-ldap DN Escaping Flaw Lets Remote Users Deny Service

A vulnerability has been reported in bind-dyndb-ldap, which can be exploited by malicious people to cause a DoS (Denial of Service).

August 2, 2012
U-226: Linux Kernel SFC Driver TCP MSS Option Handling Denial of Service Vulnerability

The Linux kernel is prone to a remote denial-of-service vulnerability.

July 31, 2012
U-224: ISC DHCP Multiple Denial of Service Vulnerabilities

ISC DHCP is prone to multiple denial-of-service vulnerabilities.

July 23, 2012
U-218: Cisco Linksys WMB54G TFTP Command Injection Vulnerability

System access from local network

July 20, 2012
U-217: Red Hat Certificate System Bugs Let Remote Users Conduct Cross-Site Scripting and Denial of Service Attacks

Two vulnerabilities were reported in Red Hat Certificate System. A remote user can conduct cross-site scripting attacks. A remote authenticated user can revoke the CA certificate.

July 13, 2012
U-212: RSA Authentication Manager Flaws Permit Cross-Site and Cross-Frame Scripting and URL Redirection Attacks

RSA Authentication Manager is prone to multiple security vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to execute arbitrary script or HTML code, steal cookie-based authentication credentials, and conduct phishing attacks. Other attacks may also be possible.

July 11, 2012
U-210: Linux Kernel epoll_ctl() Bug Lets Local Users Deny Service

A vulnerability was reported in the Linux Kernel. A local user can cause denial of service conditions.

July 9, 2012
U-207: Pidgin 'mxit_show_message()' Function Stack-Based Buffer Overflow Vulnerability

Pidgin is prone to a stack-based buffer-overflow vulnerability.

July 6, 2012
U-206: WordPress Flaws Permit Cross-Site Scripting, Cross-Site Request Forgery, and Information Disclosure Attacks

Several vulnerabilities were reported in WordPress. A remote authenticated user can conduct cross-site scripting attacks. A remote user can conduct cross-site request forgery attacks. A remote authenticated user can obtain potentially sensitive information.