search for: 10691

...lnerable version: 2.3.0 - 2.3.5.1 Vulnerable component: json encoder Report confidence: Confirmed Researcher credits: cPanel L.L.C. Solution status: Fixed by Vendor Fixed version: 2.3.5.2 Vendor notification: 2019-04-02 Solution date: 2019-04-11 Public disclosure: 2019-04-18 CVE reference: CVE-2019-10691 CVSS: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) ? Vulnerability Details: JSON encoder in Dovecot 2.3 incorrecty assert-crashes when encountering invalid UTF-8 characters. This can be used to crash dovecot in two ways. Attacker can repeatedly crash Dovecot authentication process by logging...

...lnerable version: 2.3.0 - 2.3.5.1 Vulnerable component: json encoder Report confidence: Confirmed Researcher credits: cPanel L.L.C. Solution status: Fixed by Vendor Fixed version: 2.3.5.2 Vendor notification: 2019-04-02 Solution date: 2019-04-11 Public disclosure: 2019-04-18 CVE reference: CVE-2019-10691 CVSS: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) ? Vulnerability Details: JSON encoder in Dovecot 2.3 incorrecty assert-crashes when encountering invalid UTF-8 characters. This can be used to crash dovecot in two ways. Attacker can repeatedly crash Dovecot authentication process by logging...

Lets try again, put wrong changelog to the mail. Sorry about this. https://dovecot.org/releases/2.3/dovecot-2.3.5.2.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.5.2.tar.gz.sig Binary packages in https://repo.dovecot.org/ ??? * CVE-2019-10691: Trying to login with 8bit username containing ??? ? invalid UTF8 input causes auth process to crash if auth policy is ??? ? enabled. This could be used rather easily to cause a DoS. Similar ??? ? crash also happens during mail delivery when using invalid UTF8 in ??? ? From or Subject header when O...

Lets try again, put wrong changelog to the mail. Sorry about this. https://dovecot.org/releases/2.3/dovecot-2.3.5.2.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.5.2.tar.gz.sig Binary packages in https://repo.dovecot.org/ ??? * CVE-2019-10691: Trying to login with 8bit username containing ??? ? invalid UTF8 input causes auth process to crash if auth policy is ??? ? enabled. This could be used rather easily to cause a DoS. Similar ??? ? crash also happens during mail delivery when using invalid UTF8 in ??? ? From or Subject header when O...

Hi! We are pleased to release Dovecot v2.3.6. Tarball is available at https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz.sig Binary packages are available at https://repo.dovecot.org/ Changes ------- * CVE-2019-11494: Submission-login crashed with signal 11 due to null pointer access when authentication was aborted by disconnecting. *

Hi! We are pleased to release Dovecot v2.3.6. Tarball is available at https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz.sig Binary packages are available at https://repo.dovecot.org/ Changes ------- * CVE-2019-11494: Submission-login crashed with signal 11 due to null pointer access when authentication was aborted by disconnecting. *

...new to java under LLVM. I have the following code in Java: class MYGL { public static int P; public static int balance; }         int Q;         MYGL.P=5984;         Q=4597;         MYGL.balance=Q+6094; For the local variable Q, it seems that the compiler is optimizing and considering store i32 10691, i32* .... (into balance). Do you know how I can compile the code for preserving Q?  I have the commands: javac -Xlint -g -O Main.java ....vmjc Main .....j3 Main ......llvm-dis < Main.bc > Main_assembly For the global variables, I have : P = ({ i32, i32 }* @MYGL_static, i32 0, i32 1) balan...

...;div> pkg adult shows the following, not mentioned in the changes: </div> <div> <br> </div> <div> dovecot-2.3.5.1 is vulnerable: </div> <div> dovecot -- json encoder crash </div> <div> CVE: CVE-2019-10691 </div> <div> WWW: <a href="https://vuxml.FreeBSD.org/freebsd/a64aa22f-61ec-11e9-85b9-a4badb296695.html" rel="noopener" target="_blank">https://vuxml.FreeBSD.org/freebsd/a64aa22f-61ec-11e9-85b9-a4badb296695.html</a> </div>...

Hi Alexandru, > For the local variable Q, it seems that the compiler is optimizing and > considering store i32 10691, i32* .... (into balance). Do you know how I can > compile the code for preserving Q? You've probably got to convince the compiler not to optimise since eliminating those variables is probably one of the simpler things that goes on during optimisation. I'd expect the unoptimised code to...

...running under Windows XP A saved copy of the data.frame can be found at http://biobase.biotech.kth.se/~valtteri/test.RData (saved with ascii=TRUE) All help is appreciated. Thanks, Valtteri Contact information: Valtteri Wirta Department of Biotechnology, KTH AlbaNova University Center S - 10691 Stockholm, Sweden Visiting address: Roslagstullsbacken 21, B3 Phone: +46 8 5537 8344(office) Phone: +46 733 386 341 (gsm) Fax: +46 8 5537 8481 Email: valtteri at biotech.kth.se Web: www.biotech.kth.se/molbio MSN messenger: valzu at hotmail.com

...om> Cc: "llvmdev at cs.uiuc.edu" <llvmdev at cs.uiuc.edu> Sent: Tuesday, June 25, 2013 5:50 PM Subject: Re: [LLVMdev] vmkit variables internal representation Hi Alexandru, > For the local variable Q, it seems that the compiler is optimizing and > considering store i32 10691, i32* .... (into balance). Do you know how I can > compile the code for preserving Q? You've probably got to convince the compiler not to optimise since eliminating those variables is probably one of the simpler things that goes on during optimisation. I'd expect the unoptimised code to...

Aki Tuomi via dovecot skrev den 2019-04-18 11:35: > ??? * CVE-2019-10691: Trying to login with 8bit username containing > ??? ? invalid UTF8 input causes auth process to crash if auth policy is > ??? ? enabled. This could be used rather easily to cause a DoS. Similar > ??? ? crash also happens during mail delivery when using invalid UTF8 > in > ??? ? Fro...

On 30 Apr 2019, at 07:21, Aki Tuomi via dovecot <dovecot at dovecot.org> wrote: > We are pleased to release Dovecot v2.3.6. pkg adult shows the following, not mentioned in the changes: dovecot-2.3.5.1 is vulnerable: dovecot -- json encoder crash CVE: CVE-2019-10691 WWW: https://vuxml.FreeBSD.org/freebsd/a64aa22f-61ec-11e9-85b9-a4badb296695.html (just curious) -- 'Things either exist or they don't,' said Jeremy. 'I am very clear about that. I have medicine.' --The Thief of Time

...------ virus btenison users 9906 tenison (192.168.5.1) Mon Mar 6 16:43:27 2000 virus lalford users 10837 alford (192.168.2.7) Mon Mar 6 17:53:40 2000 virus jdale users 10600 dale (192.168.2.11) Mon Mar 6 17:34:32 2000 virus tsunday users 10691 sunday (192.168.2.12) Mon Mar 6 17:41:21 2000 virus elong users 10466 long (192.168.2.5) Mon Mar 6 17:20:03 2000 virus cbyrd users 10022 byrd (192.168.2.8) Mon Mar 6 16:51:21 2000 Locked files: Pid DenyMode R/W Oplock Name --------...

...quot; for that? Thank you very much, Laetitia ---------------------------------------------------------------------------- Laetitia G. Schmid Master Student of Evolutionary Genetics in Marine Mammals Department of Genetics, Microbiology and Toxicology Stockholm University Svante Arrheniusv?g 16 10691 Stockholm, Sweden private: Laetitia G. Schmid c/o Von Ahn Sk?ntorpsv?gen 100 12053 Stockholm Sverige +46 70 651 0185 laetitia at gmt.su.se

I''ve read the postings about Juggernaut with interest, it is an interesting approach but in wondering about a solution that wouldn''t require flash I did some searching and came across activemq (http://incubator.apache.org/activemq). Their approach for messaging to an AJAX client (http://incubator.apache.org/activemq/ajax.html)seems to be a combination of polling and keeping

...om> Cc: "llvmdev at cs.uiuc.edu" <llvmdev at cs.uiuc.edu> Sent: Tuesday, June 25, 2013 5:50 PM Subject: Re: [LLVMdev] vmkit variables internal representation Hi Alexandru, > For the local variable Q, it seems that the compiler is optimizing and > considering store i32 10691, i32* .... (into balance). Do you know how I can > compile the code for preserving Q? You've probably got to convince the compiler not to optimise since eliminating those variables is probably one of the simpler things that goes on during optimisation. I'd expect the unoptimised code to...

...10478]: ns_forw: query(55.254.58.211.in-addr.arpa) All possible A RR's lame Nov 25 11:33:45 ns sshd[10689]: Disconnecting: crc32 compensation attack: network attack detected Nov 25 11:33:45 ns sshd[10690]: Disconnecting: crc32 compensation attack: network attack detected Nov 25 11:33:46 ns sshd[10691]: Disconnecting: crc32 compensation attack: network attack detected Nov 25 11:33:46 ns sshd[10692]: Disconnecting: crc32 compensation attack: network attack detected Nov 25 11:33:47 ns sshd[10693]: Disconnecting: crc32 compensation attack: network attack detected Nov 25 11:33:48 ns sshd[10694]: Dis...

Hi all, I still have problems with my nt authentication on linux. My problems start when compiling --with-pam This is the output, i can't figure out why i get the error. [root@squid source]# ./configure --with-pam loading cache ./config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -O ) works... yes checking whether the C compiler (gcc -O ) is a

Hello, Hopefully I'm in the right place asking for help :-) I need to move from an old physical Suse 8.2 - samba 2.2.7 + ldap - to latest samba versions, I would like to use an ubuntu 8.04 virtual machine. The domain is in production on the physical server, to be dismissed after migration. It is also the file server!!! so /DATA/ has all shared and permission driven file access.. I was