CVE-2011-0401

Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attackers to cause a denial of service inode consumption by establishing many sessions...

CVE-2011-0401

Piwik before 1.1 allows unlimited files under tmp/sessions, enabling a DoS via inode consumption from numerous sessions. Affected component: Piwik core (session file handling). Root cause: the product does not properly limit the number of files stored in tmp/sessions/. Impact: potential denial of...

CVE-2011-0401

Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attackers to cause a denial of service inode consumption by establishing many sessions...

Fedora Update for openttd FEDORA-2010-11450

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : openttd-1.0.1-1.fc13 (2010-7895)

Fixes security issues CVE-2010-0401, CVE-2010-0402 and CVE-2010-0406. http://security.openttd.org/en/CVE-2010-0401 http://security.openttd.org/en/CVE-2010-0402 http://security.openttd.org/en/CVE-2010-0406 Note that Tenable Network Security has extracted the preceding description block directly fr...

Fedora 12 : openttd-1.0.1-1.fc12 (2010-7800)

Fixes security issues CVE-2010-0401, CVE-2010-0402 and CVE-2010-0406. http://security.openttd.org/en/CVE-2010-0401 http://security.openttd.org/en/CVE-2010-0402 http://security.openttd.org/en/CVE-2010-0406 Note that Tenable Network Security has extracted the preceding description block directly fr...

TeX Live predospecial()函数.dvi文件解析整数溢出漏洞

BUGTRAQ ID: 39500 CVECAN ID: CVE-2010-0739 TeX Live是用于创建TeX排版系统的工具。 TeX Live的dospecial.c文件中的predospecial函数在处理.dvi文件时存在最终可导致堆溢出的整数溢出漏洞。用户受骗打开了畸形的.dvi文件就可以触发这个溢出，导致以运行应用程序用户的权限执行任意代码。 TeX Live 3.0 TeX Live 2008 TeX Live 2007 TeX Live 2.0 TeX Live 1.0 厂商补丁： RedHat ------...

Fedora Update for openttd FEDORA-2010-7800

Check for the Version of openttd OpenVAS Vulnerability Test Fedora Update for openttd FEDORA-2010-7800 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for openttd FEDORA-2010-7885

Check for the Version of openttd OpenVAS Vulnerability Test Fedora Update for openttd FEDORA-2010-7885 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for tetex RHSA-2010:0401-01

Check for the Version of tetex OpenVAS Vulnerability Test RedHat Update for tetex RHSA-2010:0401-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for openttd FEDORA-2010-7800

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-0401

OpenTTD to version 1.0.0/1.0.1 before the patch fixes CVE-2010-0401, where a server password request can be answered with a company password, allowing remote authenticated users to bypass access controls or trigger a daemon crash. Root cause: authentication handler incorrectly accepts a company p...

HP-UX Update for Mozilla remote HPSBUX01133

Check for the Version of Mozilla remote OpenVAS Vulnerability Test HP-UX Update for Mozilla remote HPSBUX01133 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2009-0401

CVE-2009-0401 describes an SQL injection in browsecats.php of E-Php CMS, exploitable by remote attackers via the cid parameter to execute arbitrary SQL. The affected component is the browsecats.php module within E-Php CMS; root cause is improper input handling that allows SQL command injection. I...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-0401. Reason: This candidate is a reservation duplicate of CVE-2008-0401. Notes: All CVE users should reference CVE-2008-0401 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2007-5763

CVE-2007-5763 is a reservation duplicate of CVE-2008-0401; however, connected advisories describe the actual vulnerability: IBM Tivoli Provisioning Manager for OS Deployment includes an HTTP server that contains a boundary/buffer overflow in the logging functionality. An unauthenticated remote at...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

CVE-2008-0401

CVE-2008-0401 affects IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) HTTP server. A boundary error in the HTTP server’s logging functionality allows remote unauthenticated attackers to send crafted HTTPS requests (port 443/tcp) with a long method string, triggering a buffer overflow ...

CVE-2006-0401

CVE-2006-0401 affects Mac OS X versions prior to 10.4.6 on Intel-based Macs. The issue allows a local attacker with physical access to bypass the firmware password and boot into Single User Mode via unspecified vectors. Impact is local authentication bypass with potential unauthorized access. The...

CVE-2005-0401

FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolli...