134 matches found
[SECURITY] [DSA-2112-1] New bzip2 packages fix integer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA-2112-1 [email protected] http://www.debian.org/security/ Stefan Fritsch September 20, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA-2112-1] New bzip2 packages fix integer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA-2112-1 [email protected] http://www.debian.org/security/ Stefan Fritsch September 20, 2010 http://www.debian.org/security/faq -...
Security fix for the ALT Linux 5 package bzip2 version 1:1.0.6-alt1
Sept. 20, 2010 Dmitry V. Levin 1:1.0.6-alt1 - Updated to 1.0.6 fixes CVE-2010-0405...
CVE-2010-0405
Integer overflow in the BZ2decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted compressed file...
DSA-2112-1 bzip2 - integer overflow
Bulletin has no description...
CVE-2009-0405
CVE-2009-0405 pertains to smartSite CMS 1.0, where SQL injection is possible in articles.php via the var parameter. The vulnerability is confirmed by multiple sources (NVD entry describes the flaw; CVE records across CVSS vector notes) and has included public exploit references (e.g., Exploit-DB,...
CVE-2009-0405
SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the var parameter...
CVE-2009-0405
creationtimestamp| type| source ---|---|--- 2009-01-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7901...
Gentoo Security Advisory GLSA 200404-13 (cvs)
The remote host is missing updates announced in advisory GLSA 200404-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Security Advisory (FreeBSD-SA-04:07.cvs.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:07.cvs.asc ADV FreeBSD-SA-04:07.cvs.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: cvs+ipv6
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-0405
CVE-2008-0405 affects HTTP File Server (HFS) and describes multiple directory traversal flaws in versions prior to 2.2c. When account names are used for log filenames, an attacker can trigger traversal with .. in the account name to create arbitrary files and directories via the / URI, and can ap...
Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities
Syhunt: HFS HTTP File Server Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities Advisory-ID: 200801162 Discovery Date: 1.16.2008 Release Date: 1.23.2008 Affected Applications: HFS 2.2 to and including 2.3Beta Build 174 Non-Affected Applications: HFS 2.1d and earlier...
Debian Security Advisory DSA 486-1 (cvs)
The remote host is missing an update to cvs announced via advisory DSA 486-1. OpenVAS Vulnerability Test $Id: deb4861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 486-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 486-1 (cvs)
The remote host is missing an update to cvs announced via advisory DSA 486-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Solaris 9 (sparc) : 123396-01
SunOS 5.9: librpcsvc patch. Date this patch was last updated by Sun : Oct/10/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2007-0405
CVE-2007-0405 affects Django 0.95: the LazyUser class in AuthenticationMiddleware does not properly cache the username across requests, allowing remote authenticated users to gain the privileges of a different user. Impact and exploit details are not provided beyond this description in the suppli...
CVE-2006-0405
The TIFFFetchShortPair function in tifdirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers a NULL pointer dereference, possibly due to changes in type declarations and/or the TIFFVSetField function...
CVE-2006-0405
CVE-2006-0405 concerns the TIFFFetchShortPair function in tif_dirread.c of libtiff 3.8.0, where a crafted TIFF image can trigger a NULL pointer dereference and cause an application crash (denial of service). The description notes this could be due to changes in type declarations and/or the TIFFVS...