Memory corruption

The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service heap memory corruption and panic or possibly have unspecified other impact via malformed 1 X25FACCALLINGAE or 2 X25FACCALLEDAE data, related t...

Integer overflow

Multiple integer underflows in the x25parsefacilities function in net/x25/x25facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of service system crash via malformed X.25 1 X25FACCLASSA, 2 X25FACCLASSB, 3 X25FACCLASSC, or 4 X25FACCLASSD facility data, a...

CVE-2010-3873

CVE-2010-3873 affects the Linux kernel X.25 implementation prior to 2.6.36.2. The vulnerability arises from improper parsing of facilities, allowing a remote attacker to trigger heap memory corruption and a kernel panic (partial availability) via malformed X25_FAC_CALLING_AE or X25_FAC_CALLED_AE ...

CVE-2010-4164

Multiple integer underflows in the x25parsefacilities function in net/x25/x25facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of service system crash via malformed X.25 1 X25FACCLASSA, 2 X25FACCLASSB, 3 X25FACCLASSC, or 4 X25FACCLASSD facility data, a...

CVE-2010-3873

The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service heap memory corruption and panic or possibly have unspecified other impact via malformed 1 X25FACCALLINGAE or 2 X25FACCALLEDAE data, related t...

CVE-2010-3873

The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service heap memory corruption and panic or possibly have unspecified other impact via malformed 1 X25FACCALLINGAE or 2 X25FACCALLEDAE data, related t...

Fedora 14 : xfig-3.2.5-25.b.fc14 (2010-18589)

Mon Dec 6 2010 Stanislav Ochotnicky - 3.2.5-25.b - Fix buffer overflow when opening malicious fig files - Thu Nov 25 2010 Hans de Goede 3.2.5-24.b - Fix importing of eps files 657290 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7257)

This kernel update for the SUSE Linux Enterprise 10 SP3 kernel fixes several security issues and bugs. The following security issues were fixed : - Multiple integer overflows in the sndctlnew function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to...

Linux kernel multiple security vulnerabilities

Multiple DoS conditions, priviloege esclations, memory leaks from kernel memory, DoS via SCTP protocol, DoS via X.25...

os-x/x86 intel - setuid shell x86_64 - 51 bytes

Exploit for os-x/x86 platform in category shellcode ========================================== OSX/Intel - setuid shell x8664 - 51 bytes ========================================== / Title: OSX/Intel - setuid shell x8664 - 51 bytes Date: 2010-11-25 Tested on: Mac OS X 10.6.5 - Darwin Kernel Versio...

Joomla Component (com_catalogue) LFI Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comcatalogue LFI Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /...

Unfixed XSS vulnerability at afterschool.my

Security researcher Wong Chieh Yie, has submitted on 14/11/2010 a cross-site-scripting XSS vulnerability affecting afterschool.my, which at the time of submission ranked 1069839 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is...

Adobe Shockwave Director rcsL Chunk Remote Code Execution

Added: 11/04/2010 CVE: CVE-2010-3653 BID: 44291 OSVDB: 68803 Background Adobe Shockwave is a multimedia player used to add animation and interactivity to web pages. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on any computer which has the...

Adobe Shockwave Director rcsL Chunk Remote Code Execution

Added: 11/04/2010 CVE: CVE-2010-3653 BID: 44291 OSVDB: 68803 Background Adobe Shockwave is a multimedia player used to add animation and interactivity to web pages. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on any computer which has the...

Pub-Me CMS Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ Pub-Me CMS Blind SQL Injection Vulnerability ============================================ Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions...

MDVA-2010:212 : mailman

The install of mailman failed because of a problem in the rpm scripts, additionally the logrotation script was fixed. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

Unfixed XSS vulnerability at www.eae.es

Security researcher zprian, has submitted on 25/10/2010 a cross-site-scripting XSS vulnerability affecting www.eae.es, which at the time of submission ranked 188708 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...

Adobe Shockwave Player Director file 'rcsL' chunk parsing vulnerability

Overview Adobe Shockwave Player 11.5.8.612 and earlier versions on the Windows and Macintosh operating systems contain a critical vulnerability in the handling of "rcsL" chunks. Description Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia and Ado...

CVE-2010-3557

The CVE-2010-3557 entry concerns a Swing component vulnerability in Oracle Java SE/Java for Business. Affected products/versions are Oracle Java SE 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28. Root cause and concrete vectors are not publicly detailed in the provided documents; however, the...

CVE-2010-3572

CVE-2010-3572 is described as an unspecified vulnerability in the Sound component of Oracle Java SE and Java for Business across several versions (6 Update 21; 5.0 Update 25; 1.4.2_27; 1.3.1_28) that could allow remote attackers to affect confidentiality, integrity, and availability via unknown v...