SuSE 10 Security Update : bind (ZYPP Patch Number 4932)

Certain input data could trigger a buffer overflow in the 'inetnetwork' function of libbind. Applications that use this function could therefore potentially be crashed or exploited to execute arbitrary code. Bind itself is not affected though. CVE-2008-0122 %NASLMINLEVEL 70300 C Tenable Network...

Fedora 8 : bind-9.5.0-23.b1.fc8 (2008-0903)

CVE-2008-0122, libbind.so off-by-one buffer overflow, very low severity Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

CVE-2008-0122

CVE-2008-0122 describes an off-by-one error in the inet_network function in libbind used by ISC BIND 9.4.2 and earlier. The vulnerability affects those BIND versions (and is used in libc on FreeBSD 6.2–7.0-PRERELEASE), enabling context-dependent attackers to trigger memory corruption that can cau...

FreeBSD Security Advisory FreeBSD-SA-08:02.libc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:02.libc Security Advisory The FreeBSD Project Topic: inetnetwork buffer overflow Category: core Module: libc Announced: 2008-01-14 Credits: Bjoern A. Zeeb and...

FreeBSD-SA-08:02.libc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:02.libc Security Advisory The FreeBSD Project Topic: inetnetwork buffer overflow Category: core Module: libc Announced: 2008-01-14 Credits: Bjoern A. Zeeb and...

CVE-2007-0122

Coppermine Photo Gallery 1.4.10 and earlier has multiple SQL injection vulnerabilities that allow remote authenticated administrators to execute arbitrary SQL commands. Affected parameters include (1) cat in albmgr.php, (2) gid in usermgr.php, (3) start in db_ecard.php, and (4) albumid in unspeci...

[Full-disclosure] rPSA-2006-0122-1 kernel

rPath Security Advisory: 2006-0122-1 Published: 2006-07-07 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Deterministic Denial of Service Updated Versions: kernel=/conary.rpath.com@rpl:devel//1/2.6.16.24-0.1-1 References:...

CVE-2006-0122

CVE-2006-0122 describes a cross-site scripting (XSS) vulnerability in Aquifer CMS, specifically in Public/Index.asp, exploitable via the Keyword parameter to inject arbitrary script/HTML. The surrounding documents consistently identify the affected component as Aquifer CMS and the vulnerability m...

CVE-2003-0122

CVE-2003-0122 is a buffer overflow in Lotus Notes/ Domino NotesRPC authentication affecting Notes servers: R4, R5 up to 5.0.11, and early R6. The flaw allows an unauthenticated attacker to trigger a heap overwrite by sending a crafted DN with an outer field length smaller than the DN length, enab...

CVE-2003-0122

Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name DN during NotesRPC authentication and an outer field length that is less than that of the DN field...

CVE-2004-0122

CVE-2004-0122 is described as affecting Microsoft MSN Messenger 6.0 and 6.1, allowing remote attackers to read arbitrary files via improper handling of certain requests. Connected advisories for pidgin/libpurple reference a related directory-traversal issue in the MSN protocol plugin (slp.c) that...

Solaris 8 (sparc) : 109152-03

SunOS 5.8: /usr/4lib/libc.so.x.9 and libdb. Date this patch was last updated by Sun : Jun/04/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2003-0122

Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name DN during NotesRPC authentication and an outer field length that is less than that of the DN field...

CVE-2002-0122

CVE-2002-0122 affects Siemens 3568i WAP mobile phones. The vulnerability enables a remote denial-of-service (crash) when an SMS containing unusual characters is received. The Connected documents provide the affected product and impact but do not specify exploit status or a concrete remediation. N...

CVE-2001-0122

CVE-2001-0122 describes a kernel leak in IBM’s FRCA (AfpaCache) module used by IBM HTTP Server 1.3.x and WebSphere 3.52. The vulnerability allows remote attackers to cause a denial of service by issuing a sequence of malformed HTTP requests that generate a "+bad request" error. Affected products ...

CVE-2001-0122

Kernel leak in AfpaCache module of the Fast Response Cache Accelerator FRCA component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error...

CVE-2001-0122

Kernel leak in AfpaCache module of the Fast Response Cache Accelerator FRCA component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error...

CVE-2000-0122

CVE-2000-0122 affects FrontPage Server Extensions. A remote attacker can determine the physical path of a virtual directory by issuing a GET to htimage.exe, leading to information disclosure about server layout. The provided records do not specify affected versions, exact vulnerable component det...