205 matches found
CVE-2009-0590
The ASN1STRINGprintex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service invalid memory access and application crash via vectors that trigger printing of a 1 BMPString or 2 UniversalString with an invalid encoded length...
CVE-2009-0590
OpenSSL vulnerability CVE-2009-0590 affects the ASN1_STRING_print_ex path for BMPString/UniversalString lengths, enabling a remote attacker to trigger invalid memory access and crash the application (DoS). The issue is present in OpenSSL builds prior to 0.9.8k. Public advisories and security bull...
Security fix for the ALT Linux 8 package openssl10 version 0.9.8k-alt1
March 25, 2009 Evgeny Sinelnikov 0.9.8k-alt1 - Updated to new 0.9.8k includes security fixes and improvements - Includes CVE-2009-0789, CVE-2009-0591, CVE-2009-0590...
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8k-alt1
March 25, 2009 Evgeny Sinelnikov 0.9.8k-alt1 - Updated to new 0.9.8k includes security fixes and improvements - Includes CVE-2009-0789, CVE-2009-0591, CVE-2009-0590...
Security fix for the ALT Linux 6 package openssl10 version 0.9.8k-alt1
March 25, 2009 Evgeny Sinelnikov 0.9.8k-alt1 - Updated to new 0.9.8k includes security fixes and improvements - Includes CVE-2009-0789, CVE-2009-0591, CVE-2009-0590...
Gentoo Security Advisory GLSA 200406-20 (Openswan)
The remote host is missing updates announced in advisory GLSA 200406-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200503-10 (Firefox)
The remote host is missing updates announced in advisory GLSA 200503-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200406-20 (Openswan)
The remote host is missing updates announced in advisory GLSA 200406-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-0590
CVE-2008-0590 — Ipswitch WS_FTP Server with SSH 6.1.0.0 is affected by a buffer overflow triggered by a long opendir command. The vulnerability allows remote authenticated users to crash the service and potentially execute arbitrary code. Affected versions are WS_FTP Server prior to 6.1.1 (per Ne...
CVE-2007-0590
CVE-2007-0590 is a Cross-site scripting (XSS) vulnerability in Forum Livre 1.0, specifically in busca2.asp, where an attacker can inject arbitrary web script or HTML via the palavra parameter. The NVD entry provides a CVSS v2 base score of 5.8 (Medium) with network access, requiring no authentica...
CVE-2006-0590
The CVE-2006-0590 entry affects MyTopix 1.2.3, where a malformed hl parameter sent to index.php allows remote attackers to disclose the installation path. The underlying issue is described as path disclosure, with a note that it might be related to invalid SQL syntax. Public references in the rec...
Mozilla Browser < 1.7.6 Multiple Vulnerabilities
The remote version of Mozilla contains multiple security issues that could allow an attacker to impersonate a website and to trick a user into accepting and executing arbitrary files or to cause a heap overflow in the FireFox process and execute arbitrary code on the remote host. C Tenable Networ...
CVE-2005-0590
The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real...
CVE-2005-0590
CVE-2005-0590 affects Firefox <1.0.1, Thunderbird <1.0.1, and Mozilla
CVE-2004-0590
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS7 certificates in which a self-signed certificate identifies an alternate...
CVE-2004-0590
The CVE-2004-0590 entry affects FreeS/WAN and related IPsec implementations (OpenS/WAN, FreeS/WAN derivatives, Super-FreeS/WAN, and strongSwan). The root cause described across connected docs is bugs in the verify_x509cert() certificate validation, allowing remote attackers to authenticate using ...
CVE-2000-0590
Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the datadir parameter...
CVE-2000-0590
CVE-2000-0590 affects the Poll It 2.0 CGI script. The vulnerability allows a remote attacker to read arbitrary files by supplying a file name in the data_dir parameter, with an example showing access to /etc/passwd. OpenVAS/Nessus entries corroborate arbitrary file access via the CGI. Remediation...