126 matches found
SuSE 11.1 Security Update : krb5 (SAT Patch Number 3839)
Multiple KDC DoS vulnerabilities if used with LDAP backends have been fixed in krb5. CVE-2011-0281 / CVE-2011-0282 have been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The te...
RHEL 6 : krb5 (RHSA-2011:0200)
Updated krb5 packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Important: Red Hat Security Advisory: krb5 security update
Updated krb5 packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
krb5 security update
add upstream patch to fix hang or crash in the KDC when using the LDAP kdb backend CVE-2011-0281, CVE-2011-0282, 671096...
krb5 -- MITKRB5-SA-2011-002, KDC vulnerable to hang when using LDAP back end
An advisory published by the MIT Kerberos team says: The MIT krb5 Key Distribution Center KDC daemon is vulnerable to denial of service attacks from unauthenticated remote attackers. CVE-2011-0281 and CVE-2011-0282 occur only in KDCs using LDAP back ends, but CVE-2011-0283 occurs in all krb5-1.9...
CVE-2009-0281
The CVE-2009-0281 entry describes an SQL injection vulnerability in the WarHound Walking Club’s login.aspx, exploitable via the (1) username and (2) password parameters. The underlying issue allows remote attackers to attempt arbitrary SQL commands. The provided documents do not specify affected ...
CVE-2009-0281
creationtimestamp| type| source ---|---|--- 2009-01-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7802...
CVE-2008-0281
CVE-2008-0281 is a SQL injection vulnerability in liste.php of ID-Commerce 2.0 and earlier, where the idFamille parameter allows remote attackers to execute arbitrary SQL commands. The public records identify the affected component as ID-Commerce 2.0 (and earlier) with a likely input vector via i...
CVE-2007-0281
Public documents provided do not include concrete technical details (affected product, root cause, exploit vectors, or remediation) for CVE-2007-0281; monitor for updates.
CVE-2006-0281
Technical details about CVE-2006-0281 are not publicly provided in the supplied documents. No explicit affected products, versions, impact or remediation are confirmed here. Monitor for updates from official sources.
CVE-2005-0281
Cross-site scripting XSS vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to inject arbitrary web script or HTML via a user message, which is not filtered or quoted when the administrator views the server logs...
CVE-2005-0281
The CVE-2005-0281 entry describes an XSS in the web interface of Soldner Secret Wars 30830. The vulnerability arises because a user message is not filtered or quoted when administrators view server logs, allowing remote attackers to inject arbitrary web script or HTML. Documented references catal...
CVE-2004-0281
Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows...
CVE-2004-0281
CVE-2004-0281 affects Caucho Resin (2.1.12) and is a path traversal vulnerability that allows remote disclosure of files under the /WEB-INF/ directory by requesting WEB-INF.., effectively bypassing directory boundaries. The core issue is improper normalization of path traversal sequences, enablin...
CVE-2003-0281
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsinetserver, 2 gdslockmgr, or 3 gdsdrop...
CVE-2003-0281
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsinetserver, 2 gdslockmgr, or 3 gdsdrop...
CVE-2003-0281
CVE-2003-0281 describes a buffer overflow in Firebird 1.0.2 and earlier versions (and possibly other InterBase-based products) that can be triggered by a long INTERBASE environment variable when invoking gds_inet_server, gds_lock_mgr, or gds_drop. The underlying issue allows local users to execut...
CVE-2002-0281
CVE-2002-0281 concerns a cross-site scripting vulnerability in DCP-Portal 4.2 and earlier . The root cause is that an attacker can inject JavaScript in the job information field submitted to the endpoint user_update.php , potentially allowing escalation of privileges to other portal users. The in...
CVE-2002-0281
Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to userupdate.php...