PT-2013-5633

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.424MDB9 on Content Services Gateway CSG devices Description The issue allows remote attackers to bypass intended access restrictions via a crafted series of packets due to improper implementation of the parse err...

CVE-2013-5552: Undefined Security Weakness

Cisco IOS 12.424MDB9 and earlier on Content Services Gateway CSG devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143...

PT-2013-4977

Name of the Vulnerable Software and Affected Versions Xen versions 4.2.x through 4.3.x Description The issue allows local users to cause a denial of service by exploiting a NULL pointer dereference in the xlu vif parse rate function. This can be achieved by using the "@" character as the VIF rate...

CVE-2013-5651

The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via a crafted bitmap, as demonstrated by a large nodeset value to numatune...

PT-2013-1335

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.18 PHP versions 5.5.x prior to 5.5.2 Description The issue arises from the improper handling of a '0' character in a domain name within the Subject Alternative Name field of an X.509 certificate by the openssl x509...

PT-2013-3546

Name of the Vulnerable Software and Affected Versions cgit versions prior to 0.9.2 Description A directory traversal issue exists in the cgit parse readme function, allowing remote attackers to read arbitrary files. This occurs when a readme file is set to a filesystem path and the url parameter...

Stack overflow

The ngxhttpparsechunked function in http/ngxhttpparse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service crash and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based...

PT-2013-3510

Name of the Vulnerable Software and Affected Versions nginx versions 1.3.9 through 1.4.0 Description The issue allows remote attackers to cause a denial of service and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size. This triggers an integer signedness error...

USN-1905-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled the xmlparseintostruct function. If a PHP application parsed untrusted XML, an attacker could use this flaw with a specially-crafted XML document to cause PHP to crash, resulting in a denial of service, or to possibly execute arbitrary code...

php: xml_parse_into_struct buffer overflow when parsing deeply nested XML

ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted document that is processed by the xmlparseintostruct function...

PT-2013-4854

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.27 Description The issue is related to the improper consideration of parsing depth in the ext/xml/xml.c component. This can be exploited by remote attackers using a crafted document processed by the xml parse into...

archive_dot_org

This plugin does a search in archive.org and parses the results. It then uses the results to find new URLs in the target site. This plugin is a time machine ! Plugin type Crawl Options Name | Type | Default Value | Description | Help ---|---|---|---|--- maxdepth | integer | 3 | Maximum recursion...

robots_txt

This plugin searches for the robots.txt file, and parses it. This file is used to as an ACL that defines what URLs a search engine can access. By parsing this file, you can get more information about the target web application. Plugin type Crawl Options This plugin doesnt have any user configured...

PT-2013-1419

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39 Description The issue is related to the br parse ip options function in the Linux kernel, which does not properly initialize a certain data structure. This allows remote attackers to cause a denial of...

DEBIAN-CVE-2013-0220

The 1 sssautofscmdgetautomntent and 2 sssautofscmdgetautomntbyname function in responder/autofs/autofssrvcmd.c and the 3 sshcmdparserequest function in responder/ssh/sshsrvcmd.c in System Security Services Daemon SSSD before 1.9.4 allow remote attackers to cause a denial of service out-of-bounds...

CVE-2012-5953

IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service infinite loop via a crafted query string...

Design/Logic Flaw

IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service infinite loop via a crafted query string...

CVE-2012-5953: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service infinite loop via a crafted query string...

PT-2013-2180

Name of the Vulnerable Software and Affected Versions IRCD-Hybrid versions prior to 8.0.6 Description The issue is related to the try parse v4 netmask function in hostmask.c, which does not properly validate masks. This allows remote attackers to cause a denial of service crash via a mask that...

Fedora Update for libexif FEDORA-2013-1257

Check for the Version of libexif OpenVAS Vulnerability Test Fedora Update for libexif FEDORA-2013-1257 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...