Showing 1 - 3 of 3

Files from Andreas Steinmetz

QNAP Crypto Key Disclosure: Posted Aug 11, 2015; Authored by Andreas Steinmetz; QNAP devices running the QNAP modified 3.12.6 kernel with firmware older than 4.1.4 Build 0804 log crypto keys on an unencrypted disk partition in world accessible files.; tags | advisory, kernel, cryptography; SHA-256 | ddfdf6fd5fb3490dae2ed64c6e9b6432242ddd203d798cd07412aaaba2d7b6ed; Download | Favorite | View

Asterisk Project Security Advisory - AST-2014-012: Posted Nov 21, 2014; Authored by Andreas Steinmetz | Site asterisk.org; Asterisk Project Security Advisory - Many modules in Asterisk that service incoming IP traffic have ACL options ("permit" and "deny") that can be used to whitelist or blacklist address ranges. A bug has been discovered where the address family of incoming packets is only compared to the IP address family of the first entry in the list of access control rules. If the source IP address for an incoming packet is not of the same address family as the first ACL entry, that packet bypasses all ACL rules. For ACLs whose rules are all of the same address family, there is no issue.; tags | advisory; SHA-256 | d63dbc1f4a1555e213fdaf8b7170df0e1ef4f9f7d5de91107a8f9832f1027a68; Download | Favorite | View

moddiskcache.txt: Posted Mar 20, 2004; Authored by Andreas Steinmetz; mod_disk_cache, for versions of Apache 2.0.49 and below, stores all client authentication credentials for cached objects on disk. This means proxy authentication credentials and possibly in certain RFC2616 defined cases, standard authentication credentials.; tags | advisory; SHA-256 | 33e8126715a7862594819b683f4ef3dee79a08ceed7484268d1fde2303ba2210; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days