CVE-2009-0403

CVE-2009-0403 concerns a SQL injection vulnerability in the Chipmunk Blogger Script, specifically in admin/authenticate.php. The flaw allows remote attackers to inject SQL commands through the (1) username and (2) password parameters, enabling arbitrary SQL execution. The connected documents prov...

CVE-2009-0403

creationtimestamp| type| source ---|---|--- 2009-01-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7894...

Gentoo Security Advisory GLSA 200404-17 (ipsec-utils)

The remote host is missing updates announced in advisory GLSA 200404-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: racoon

The remote host is missing an update to the system as announced in the referenced advisory. VID ccd698df-8e20-11d8-90d1-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CentOS 3 / 4 : freetype (CESA-2007:0403)

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw...

CVE-2006-0403

CVE-2006-0403 affects e-moBLOG 1.3 with multiple SQL injection vulnerabilities exploitable via the (1) monthy parameter to index.php and (2) login parameter to admin/index.php. Remote attackers could execute arbitrary SQL commands. Root cause described as improper handling of user input leading t...

CVE-2005-0403

CVE-2005-0403 affects Red Hat Enterprise Linux 3 via the Red Hat backport of NPTL. The vulnerable code is in init_dev of tty_io.c , where controlling ttys are not properly cleared in multi‑threaded applications, enabling a local user to crash the system and potentially gain access to ttys through...

CVE-2005-0403

initdev in ttyio.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service crash and possibly gain tty access via unknown attack vectors that trigger an access of ...

Fedora Core 2 : ipsec-tools-0.2.5-2 (2004-132)

An updated ipsec-tools package that fixes vulnerabilities in racoon the ISAKMP daemon is now available. When ipsec-tools receives an ISAKMP header, it will attempt to allocate sufficient memory for the entire ISAKMP message according to the header's length field. If an attacker crafts an ISAKMP...

CVE-2004-0403

Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...

CVE-2004-0403

The CVE-2004-0403 issue affects ipsec-tools’ racoon ISAKMP daemon. A remote attacker can overwhelm memory by sending an ISAKMP packet with a large length field, leading to denial of service. Affected product: racoon (part of ipsec-tools) prior to 20040408a. Root cause: ISAKMP header length field ...

CVE-2004-0403

Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...

CVE-2004-0403

Removed by vendor...

CVE-2003-0403

Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service service halt by directly accessing the /vgn/license template...

CVE-2003-0403

Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service service halt by directly accessing the /vgn/license template...

CVE-2003-0403

CVE-2003-0403 affects Vignette StoryServer 5 and Vignette V/5. Remote attackers can read and modify license information and cause a denial of service by directly accessing the /vgn/license template. The provided documents do not include root-cause analysis, affected versions beyond the products n...

CVE-2002-0403

DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service CPU consumption via a malformed packet that causes Ethereal to enter an infinite loop...

CVE-2002-0403

CVE-2002-0403 affects Ethereal's DNS dissector. Vulnerable: Ethereal versions prior to 0.9.3. Exploitation causes a denial of service through CPU consumption by a malformed DNS packet that makes Ethereal enter an infinite loop. Remediation is to upgrade Ethereal to a fixed version (e.g., 0.9.3 or...

CVE-2001-0403

/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI...

CVE-2001-0403

Solaris: The /opt/JSparm/bin/perfmon program is affected. Local users can leverage the GUI’s Logging File option to create arbitrary files with root privileges. The vulnerability description and impact are drawn from CVE-2001-0403/NVD entries, which specify local root impact (C/C/I/A = high). No ...