545 matches found
fetchmail -- potential crash in -v -v verbose mode
Matthias Andree reports: Gunter Nau reported fetchmail crashing on some messages; further debugging by Petr Uzel and Petr Cerny at Novell/SUSE Czech Republic dug up that this happened when fetchmail was trying to print, in -v -v verbose level, headers exceeding 2048 bytes. In this situation,...
vanilla-sql.txt
= 4.1, magicquotesgpc=Off Tested on versions 1.1.3, 1.1.2, 1.0.1 echo "------------------------------------------------------------\n"; echo "Vanilla - use specific prefix default LUM\n"; echo "-id= - use specific user id default 1\n"; echo "-c= - benchmark's loop count default 300000\n"; echo "-...
MS07-042: Description of the security update for Microsoft XML Core Services 6.0: August 14, 2007
None None...
Moderate tar security update
1.14-12.RHEL4 - fix CVE-2006-6097 GNU tar directory traversal 216937 1.14-11.RHEL4 - fix verbose output 192770...
DEBIAN-CVE-2006-6614
The saveloglocal function in Fully Automatic Installation FAI 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to...
CVE-2006-6614
The saveloglocal function in Fully Automatic Installation FAI 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to...
CVE-2006-6614
The CVE-2006-6614 issue affects Fully Automatic Installation (FAI) 2.10.1 (and possibly 3.1.2). When verbose mode is enabled, the save_log_local function writes the root password hash to /var/log/fai/current/fai.log, and the log file’s permissions permit copying to other hosts when fai-savelog is...
Debian DSA-1056-1 : webcalendar - verbose error message
David Maciejak noticed that webcalendar, a PHP-based multi-user calendar, returns different error messages on login attempts for an invalid password and a non-existing user, allowing remote attackers to gain information about valid usernames. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
DSA-1056-1 webcalendar - verbose error message
Bulletin has no description...
CVE-2004-2652
Removed by vendor...
JRun mod_jrun WriteToLog buffer overflow
Added: 12/10/2005 CVE: CVE-2004-0646 BID: 11245 OSVDB: 10546 Background Macromedia JRun is a J2EE application server. modjrun is an Apache module which enables the use of JRun applications through an Apache web server. Problem A buffer overflow vulnerability in modjrun and modjrun20 allows a remo...
JRun mod_jrun WriteToLog buffer overflow
Added: 12/10/2005 CVE: CVE-2004-0646 BID: 11245 OSVDB: 10546 Background Macromedia JRun is a J2EE application server. modjrun is an Apache module which enables the use of JRun applications through an Apache web server. Problem A buffer overflow vulnerability in modjrun and modjrun20 allows a remo...
JRun mod_jrun WriteToLog buffer overflow
Added: 12/10/2005 CVE: CVE-2004-0646 BID: 11245 OSVDB: 10546 Background Macromedia JRun is a J2EE application server. modjrun is an Apache module which enables the use of JRun applications through an Apache web server. Problem A buffer overflow vulnerability in modjrun and modjrun20 allows a remo...
JRun mod_jrun WriteToLog buffer overflow
Added: 12/10/2005 CVE: CVE-2004-0646 BID: 11245 OSVDB: 10546 Background Macromedia JRun is a J2EE application server. modjrun is an Apache module which enables the use of JRun applications through an Apache web server. Problem A buffer overflow vulnerability in modjrun and modjrun20 allows a remo...
Snort Intrusion detection system DoS
Crash on parsing TCP options in verbose mode...
Snort 2.x - PrintTcpOptions Remote Denial of Service
// source: https://www.securityfocus.com/bid/14811/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the 'PrintTcpOptions' function of 'log.c', and is a result of a failure to sufficiently handle malicious TCP packets. A remote...
Snort 2.x - PrintTcpOptions Remote Denial of Service
Snort 2.x - PrintTcpOptions Remote Denial of Service // source: https://www.securityfocus.com/bid/14811/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the 'PrintTcpOptions' function of 'log.c', and is a result of a failure to...
Snort <= 2.4.0 SACK TCP Option Error Handling Denial of Service Exploit
No description provided by source. /------------------------------------------ ||------+ Snort = 2.4.0 Trigger p0c +------|| |||| ||--= nitrous at vulnfact dot com =--|| ||--= VulnFact Security Labs =--|| ||--= 21 Ago 2oo5 =--|| ||--= Mexico =--|| |||| -- Snort = 2.4.0 SACK TCP Option Error...
several vulnerabilities present in Belkin wireless routers
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory name: several vulnerabilities present in Belkin wireless routers Overall severity rating: HIGH risk Devices affected: "belkin54g" family of wireless routers 4 main vulnerabilities are included in this advisory: - - default telnet backdoor - -...
Microsoft Windows - WINS Vulnerability + OS/SP Scanner
/ HAT-SQUAD WINS VULNERABILITY/OS SCANNER ------------------------------------ ------------------------------------ Note: ---------------- By default, nothing printed on screen, 200 threads, all results in the file HSWINS.txt -v..: lite verbose, will print the 'NOTPATCHED' results on the screen...