FTPShell Client v5.24 Buffer Overflow

2015-12-30 Thread apparitionsec
[+] Credits: hyp3rlinx [+] Website: hyp3rlinx.altervista.org [+] Source: http://hyp3rlinx.altervista.org/advisories/FTPSHELL-v5.24-BUFFER-OVERFLOW.txt Vendor: www.ftpshell.com Product: FTPShell Client version 5.24

[oCERT 2015-012] Ganeti multiple issues

2015-12-30 Thread Daniele Bianco
#2015-012 Ganeti multiple issues Description: Ganeti, an open source virtualization manager, suffers from multiple issues in its RESTful control interface (RAPI). The distributed replicated storage (DRBD) secret is leaked by the RAPI interface when job results are requested. Leveraging on the