Fedora 9 : fail2ban-0.8.3-18.fc9 (2009-1736)

This updates fixes CVE-2009-0362. See https://vulners.com/cve/CVE-2009-0362 for further details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

CVE-2009-0362

filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...

CVE-2009-0362

filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...

CVE-2009-0362

Fail2ban 0.8.3 contains a regex flaw in filter.d/wuftpd.conf that misinterprets a crafted reverse-resolved DNS rhost entry containing a substring resembling an IP address, enabling remote attackers to trigger denial of service (forced authentication failures). The issue stems from an incorrect re...

CVE-2009-0362

filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...

CVE-2009-0362

filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...

FreeBSD Ports: awstats

The remote host is missing an update to the system as announced in the referenced advisory. VID fdad8a87-7f94-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0362

The CVE-2008-0362 entry describes a Cross-Site Scripting (XSS) vulnerability in Clever Copy versions up to 3.0, specifically in gallery.php. The flaw allows remote attackers to inject arbitrary web script or HTML through the album parameter. Affected software is the Clever Copy gallery implementa...

CVE-2007-0362

CVE-2007-0362 affects FreshReader’s RSS feed component prior to 1.0.07010600. The vulnerability is a cross-site scripting (XSS) flaw that could allow remote attackers to inject arbitrary scripts or HTML, potentially via tag attributes, with the impact being execution of scripts in a user’s browse...

CVE-2006-0362

The CVE-2006-0362 entry affects TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324 and TOS 2.2.x before 2.2.1.6506. The vulnerability stems from an underlying issue (root cause described as unknown vector, but an HTTP request with a negative Content-Length header is likely) that...

CVE-2005-0362

CVE-2005-0362 affects AWStats (awstats.pl) with AWStats 6.2, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the parameters 1) pluginmode, 2) loadplugin, or 3) noloadplugin. The issue arises from improper handling/sanitation of user-supplied input in t...

CVE-2005-0362

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

CVE-2005-0362

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

CVE-2005-0362

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

CVE-2002-0362

Buffer overflow in AOL Instant Messenger AIM 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711...

CVE-2002-0362

CVE-2002-0362: A buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote code execution via a long AddExternalApp request using a TLV type greater than 0x2711. Vulnerable component: AIM client input handling for AddExternalApp TLV. Exploit scenario: remote attacker sends crafte...

Immunity Canvas: BLACKICE

Name| blackice ---|--- CVE| CVE-2004-0362 Exploit Pack| CANVAS Description| BlackIce Stack Overflow Notes| CVE Name: CVE-2004-0362 VENDOR: ISS Notes: This is the exploit that the Witty worm used. Try it a couple times if it doens't work initially. Repeatability: This is a one shot exploit. CVE Ur...

CVE-2004-0362

CVE-2004-0362 affects ISS PAM ICQ parsing in RealSecure/BlackICE/Proventia products. The issue is multiple stack-based buffer overflows in the ICQ server response handling (SRV_MULTI carrying SRV_USER_ONLINE/SRV_META_USER with long nickname/firstname/lastname/email), enabling remote code executio...

CVE-2004-0362

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module PAM component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRVMULTI response containing a SRVUSERONLINE response packet...

CVE-2003-0362

CVE-2003-0362 is a buffer overflow in gPS before 0.10.2 that may allow local users to trigger a denial of service (SIGSEGV) in rgpsp via long command lines. The NVD entry notes the vulnerability originates from processing lengthy arguments, with a CVSSv2 base score of 5.0 (Partial availability im...