CVE-2011-0379

CVE-2011-0379 is a buffer overflow in Cisco TelePresence components triggered by crafted Cisco Discovery Protocol packets. Affected products include Cisco ASA 5500 series with software 1.6.x, Cisco TelePresence Multipoint Switch (CTMS) with 1.0.x–1.6.x, Cisco TelePresence endpoints (1.2.x–1.6.x),...

CVE-2010-0379

Mode C: The CVE-2010-0378/CVE-2010-0379 family concerns Adobe Flash Player 6.0.79 in the Macromedia Flash ActiveX control for Windows XP SP2/SP3. The use-after-free vulnerability in CVE-2010-0378 allows remote code execution when unloading a Flash object being accessed by a script, causing memory...

CVE-2009-0379

CVE-2009-0379 describes an SQL injection in the Joomla! component com_pcchess (Prince Clan Chess Club) via the game_id parameter in the showgame action to index.php. This is a remote, unauthenticated injection vulnerability with potential for arbitrary SQL execution. The vector is distinct from C...

FreeBSD Security Advisory (FreeBSD-SA-06:06.kmem.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:06.kmem.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2008-0379

CVE-2008-0379 affects Crystal Reports XI Release 2 (Crystal Reports XI, Enterprise Tree ActiveX control in EnterpriseControls.dll 11.5.0.313). The vulnerability is a race condition in the SelectedSession method that can trigger a buffer overflow, allowing remote attackers to cause a denial of ser...

CVE-2007-0379

CVE-2007-0379 describes a cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The NVD entry notes a MEDIUM severity (CVSSv2: AV:N/AC:M/Au:N/C:P/I:P/A:P) with partial impacts on confidentiality, integrity, a...

FreeBSD多个本地内存泄露漏洞

BUGTRAQ ID: 16373 CVECAN ID: CVE-2006-0379,CVE-2006-0380 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码的Unix类系统。 FreeBSD的内核实现上存在多个漏洞，可能导致向非授权用户泄露内核内存信息。 一个漏洞是由于内核向用户态缓冲区复制数据时没有正确地清除原有内容，另一个漏洞是由于向用户缓冲区复制了过多的数据。 FreeBSD FreeBSD 6.0-STABLE FreeBSD FreeBSD 6.0-RELEASE FreeBSD FreeBSD 5.4-RELENG FreeBSD FreeBSD...

FreeBSD Security Advisory FreeBSD-SA-06:06.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:06.kmem Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure Category: core Module: kernel Announced: 2006-01-25 Credits: Xin LI, Karl...

CVE-2006-0379

The CVE-2006-0379 issue affects FreeBSD 5.4-STABLE and 6.0, where a kernel-stack buffer is not fully initialized before being copied to userland, allowing local disclosure of kernel memory. The impact includes exposure of memory contents such as file-cache or terminal buffers, potentially aiding ...

FreeBSD-SA-06:06.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:06.kmem Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure Category: core Module: kernel Announced: 2006-01-25 Credits: Xin LI, Karl...

FreeBSD -- Local kernel memory disclosure

Problem description: A buffer allocated from the kernel stack may not be completely initialized before being copied to userland. CVE-2006-0379 A logic error in computing a buffer length may allow too much data to be copied into userland. CVE-2006-0380 Impact: Portions of kernel memory may be...

CVE-2005-0379

Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the zbpath parameter to 1 head.php or 2 outlogin.php, or the dir parameter to 3 write.php...

CVE-2004-0379

Multiple cross-site scripting XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts...

CVE-2004-0379

CVE-2004-0379 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001. The affected component is three scripts within SharePoint Portal Server 2001, where XSS could allow remote attackers to process arbitrary web content and steal cookies via ...

CVE-2003-0379

CVE-2003-0379 concerns Apple File Service (AFP Server) on Mac OS X Server. When sharing files on a UFS or re‑shared NFS volume, remote attackers could overwrite arbitrary files. The description and public records (NVD) indicate a remote, unauthenticated access vector with low attack complexity, r...

CVE-2002-0379

CVE-2002-0379 describes a buffer overflow in the University of Washington UW-IMAPd server (uw-imapd) for imap-2001/imapd 2001.315 and imap-2001a/imapd 2001.315, and imapd 2000.287 and earlier, when handling legacy RFC 1730 BODY requests. The vulnerability allows a remote authenticated user to exe...

CVE-2002-0379

...

CVE-2001-0379

Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights...

CVE-2000-0379

The CVE-2000-0379 entry concerns the Netopia R9100 router, where authenticated users can modify SNMP tables even when the administrator has disabled this capability. According to the NVD entry, the vulnerability has a CVSS base score of 3.6 (LOW) with LOCAL attack vector, low complexity, and no a...