CVE-2013-0382

CVE-2013-0382 affects Oracle E-Business Suite’s Oracle Marketing component (Campaign Management) across versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. The connected documents do not specify the exact root cause, vulnerable file/function, or exploitation details; they only state an unspec...

CVE-2012-0382

CVE-2012-0382 affects Cisco IOS and IOS XE: MSDP implementation vulnerable to DoS via MSDP packets carrying encapsulated IGMP data, causing a device reload. Affects Cisco IOS 12.0; 12.2–12.4; 15.0–15.2; IOS XE 2.1.x–2.6.x and 3.1.xS–3.4.xS before 3.4.1S, and 3.1.xSG–3.2.xSG before 3.2.2SG. The at...

Cisco IOS 15.x组播源发现协议远程拒绝服务漏洞

BUGTRAQ ID: 52759 CVE ID: CVE-2012-0382 MSDP是用于连接多个PIM-SM域的协议，允许一个组的组播源让不同域内的所有RP知悉。 从外部MSDP配置的对等路由器接收到包含压缩的IGMP数据的MSDP报文时，可造成受影响设备重载。如果该路由器明确的加入了组播组，才可利用此漏洞。MSDP报文目标地址是单一传播，可发往受影响设备上的任何IP地址，包括回送地址。通行报文不会触发此漏洞。 0 Cisco IOS 15.x 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20120328-msdp）以及相应补丁:...

Gentoo Security Advisory GLSA 201006-11 (BIND)

The remote host is missing updates announced in advisory GLSA 201006-11. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2011-0382

CVE-2011-0382 is a CGI Command Injection vulnerability in Cisco TelePresence Recording Server 1.6.x prior to 1.6.2. An unauthenticated attacker can trigger remote command execution via a crafted request to port 443. The Cisco advisory maps this to bug CSCtf97221 and lists the affected versions; f...

Debian Security Advisory DSA 2054-2 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 2054-2. OpenVAS Vulnerability Test $Id: deb20542.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2054-2 bind9 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2054-2] New bind9 packages fix cache poisoning

-------------------------------------------------------------------------- Debian Security Advisory DSA 2054-2 [email protected] http://www.debian.org/security/ Martin Schulze June 15th, 2010 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2054-1 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 2054-1. OpenVAS Vulnerability Test $Id: deb20541.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2054-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian DSA-2054-1 : bind9 - DNS cache poisoning

Several cache-poisoning vulnerabilities have been discovered in BIND. These vulnerabilities apply only if DNSSEC validation is enabled and trust anchors have been installed, which is not the default. The Common Vulnerabilities and Exposures project identifies the following problems : -...

[SECURITY] [DSA 2054-1] New bind9 packages fix cache poisoning

------------------------------------------------------------------------ Debian Security Advisory DSA-2054-1 [email protected] http://www.debian.org/security/ Florian Weimer June 04, 2010 http://www.debian.org/security/faq -...

GLSA-201006-11 : BIND: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201006-11 BIND: Multiple vulnerabilities Multiple cache poisoning vulnerabilities were discovered in BIND. For further information please consult the CVE entries and the ISC Security Bulletin referenced below. Note: CVE-2010-0290...

CVE-2010-0382

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response...

CVE-2010-0382

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response...

CVE-2010-0382

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response...

CVE-2010-0382

CVE-2010-0382 affects ISC BIND 9.0.x–9.3.x and several newer 9.4/9.5/9.6/9.7 builds with DNSSEC validation enabled. The issue arises from a regression during the fix for CVE-2009-4022 and allows a remote attacker to influence a response via out-of-bailiwick data without re-fetching from the origi...

CVE-2009-0382

CVE-2009-0382 involves Drupal's Internationalization (i18n) Translation 5.x before 5.x-2.5. The vulnerability allows remote attackers who have the translate node permission to bypass intended access restrictions and read unpublished nodes via unspecified vectors. The connected documents confirm t...

Immunity Canvas: PHPMYBB1210_INCLUDE

Name| phpmybb1210include ---|--- CVE| CVE-2008-0382 Exploit Pack| CANVAS Description| PHP MyBB v1.2.10 Command Injection Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: mybboard.net CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-0382 CVE Name: CVE-2008-0382...

Debian Security Advisory DSA 309-1 (eterm)

The remote host is missing an update to eterm announced via advisory DSA 309-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-0382

Multiple SQL injection vulnerabilities in letterman.class.php in the Letterman 1.2.3 comletterman component for Joomla! before 1.0.12 allow remote attackers to execute arbitrary SQL commands via the id parameter, related to the 1 lmsendMail, 2 saveNewsletter, and 3 cancelNewsletter functions...