453 matches found
[SECURITY] [DSA-311-1] New kernel packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 311-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 8th, 2003 http://www.debian.org/security/faq -...
Multiple Ethernet Driver Frame Padding Information Disclosure (Etherleak)
The remote host uses a network device driver that pads ethernet frames with data which vary from one packet to another, likely taken from kernel memory, system memory allocated to the device driver, or a hardware buffer on its network interface card. Known as 'Etherleak', this information...
CVE-2003-0001
The CVE-2003-0001 issue, known as Etherleak, is an information-disclosure vulnerability caused by NIC/device drivers not padding Ethernet frames with null bytes, allowing an adjacent attacker to glimpse memory content from previously transmitted packets. Connected documents show this vulnerabilit...
CVE-2001-0001
cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie...
CVE-2001-0001
PHP-Nuke 4.4 is affected by an authentication bypass via the cookiedecode flow. A crafted cookie (base64-encoded string split by colon) is decoded to populate $cookie[0] and other variables, allowing an attacker to manipulate the SQL in updates to impersonate other users and view or modify their ...
CVE-2002-0001
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list...
CVE-2002-0001
CVE-2002-0001 affects mutt up to versions prior to 1.2.5.1 and 1.3.x prior to 1.3.25. The flaw is in the RFC822 address parser, where an improperly terminated comment or phrase in the address list can allow remote code execution. Debian/OpenVAS entries confirm upstream fixes in 1.2.5.1 and 1.3.25...
CVE-2001-0001
cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie...
CVE-2000-0001
CVE-2000-0001 affects RealMedia/RealServer via a remote DoS caused by a buffer overflow in the ramgen request handling. The Nessus/NASL entry describes crashing the remote Real Server by sending a long ramgen path (e.g., GET /ramgen/AAAAA...AAA HTTP/1.1), which prevents service delivery to legiti...
CVE-1999-0001
CVE-1999-0001 concerns a DoS in BSD-derived TCP/IP stacks: ip_input.c can crash or hang when remote attackers send crafted packets. The description across connected sources reiterates that remote packet crafting triggers a denial of service, with no publicly stated exploit details or mitigation i...
CVE-1999-0001
ipinput.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service crash or hang via crafted packets...