CVE-2008-0247

Summary: IBM Tivoli Storage Manager Express 5.3’s Backup Server component (dsmsvc.exe) is affected by a heap-based buffer overflow when handling a length field in a network packet. This vulnerability can be triggered by an unauthenticated remote attacker sending a crafted packet to the Express Ba...

SuSE 10 Security Update : squid (ZYPP Patch Number 2502)

This update fixes a remotely exploitable denial-of-service bug in squid, that can be triggered by using special ftp:// URLs. CVE-2007-0247 The packages are not vulnerable to a bug in external ACLs. CVE-2007-0248 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

Ubuntu 6.06 LTS / 6.10 : squid vulnerabilities (USN-414-1)

David Duncan Ross Palmer and Henrik Nordstrom discovered that squid incorrectly handled special characters in FTP URLs. Remote users with access to squid could crash the server leading to a denial of service. CVE-2007-0247 Erick Dantas Rotole and Henrik Nordstrom discovered that squid could end u...

openSUSE 10 Security Update : squid (squid-2504)

This update fixes a remotely exploitable denial-of-service bug in squid, that can be triggered by using special ftp:// URLs. CVE-2007-0247 Additionally the 10.2 package needed a fix for another DoS bug CVE-2007-0248 and for maxuserip handling in ntlmauth. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : squid (MDKSA-2007:026)

A vulnerability in squid was discovered that could be remotely exploited by using a special ftp:// URL CVE-2007-0247. Another Denial of Service vulnerability was discovered in squid 2.6 that allows remote attackers to crash the server by causing an externalaclqueue overload CVE-2007-0248...

SUSE-SA:2007:012: squid

The remote host is missing the patch for the advisory SUSE-SA:2007:012 squid. This update fixes a remotely exploitable denial-of-service bug in squid that can be triggered by using special ftp:// URLs. CVE-2007-0247 Additionally the 10.2 package needed a fix for another DoS bug CVE-2007-0248 and...

CVE-2007-0247

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service core dump via crafted FTP directory listing responses, possibly related to the 1 ftpListingFinish and 2 ftpHtmlifyListEntry functions...

CVE-2007-0247

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service core dump via crafted FTP directory listing responses, possibly related to the 1 ftpListingFinish and 2 ftpHtmlifyListEntry functions...

CVE-2007-0247

CVE-2007-0247 affects Squid up to version 2.6.STABLE7, where remote FTP servers can trigger a denial-of-service (core dump) via crafted FTP directory listing responses, potentially related to ftpListingFinish and ftpHtmlifyListEntry. The vulnerability is described as a remotely exploitable DoS af...

CVE-2006-0247

CVE-2006-0247 affects Netbula Anyboard up to version 9.9: anyboard.cgi is vulnerable to Cross-site Scripting via the tK parameter in a find command. Exploitation details are not provided beyond remote attackers being able to inject arbitrary script/HTML. No remediation information is included in ...

CVE-2005-0247

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...

SUSE-SA:2005:027: postgresql

The remote host is missing the patch for the advisory SUSE-SA:2005:027 postgresql. Several problems were identified and fixed in the PostgreSQL database server. Multiple buffer overflows in the low level parsing routines may allow attackers to execute arbitrary code via: 1 a large number of...

RHEL 4 : postgresql (RHSA-2005:138)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:138 advisory. A flaw in the LOAD command in PostgreSQL was discovered. A local user could use this flaw to load arbitrary shared libraries and therefore...

RHEL 2.1 : postgresql (RHSA-2005:150)

Updated PostgreSQL packages to fix various security flaws are now available for Red Hat Enterprise Linux 2.1AS. This update has been rated as having important security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS. A flaw...

CVE-2005-0247

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...

CVE-2005-0247

Technical details (affected product, version, root cause, impact, or fix) for CVE-2005-0247 are not publicly provided in the supplied connected documents. Monitor for updates as additional information may be released.

CVE-2000-0247

Unknown vulnerability in Generic-NQS GNQS allows local users to gain root privileges...

CVE-2000-0247

Technical details about CVE-2000-0247 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-0247

CVE-2004-0247 affects Chaser 1.50 and earlier. A remote attacker can cause a denial of service by sending a UDP packet whose length field exceeds actual data, causing the client/server to read past memory. The provided documents describe the vulnerability and impact but do not specify a remediati...

CVE-2004-0247

The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service crash via exception via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory...