95 matches found
Solaris 10 (x86) : 138084-01
SunOS 5.10x86: snoop patch. Date this patch was last updated by Sun : Aug/04/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
CVE-2008-0964
The CVE-2008-0964 issue affects SunOS/Solaris snoop for several Solaris releases. The root cause is a stack-based buffer overflow in snoop when handling SMB traffic with the -o option omitted, enabling remote code execution. Concrete fixes are available via Solaris patch updates: 108964-11 (Solar...
OpenSSL DTLS远程堆溢出漏洞
BUGTRAQ ID: 26055 CVECAN ID: CVE-2007-4995 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL的DTLS支持中存在漏洞，攻击者可以创建能够触发堆溢出的恶意客户端或服务器，导致执行任意指令。 请注意这个漏洞仅影响使用DTLS的应用程序。 OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 RedHat Linux 5.0 OpenSSL Project ---------------...
CVE-2007-0964
The vulnerability CVE-2007-0964 affects Cisco Firewall Services Module (FWSM) 3.x prior to 3.1(3.18). The root cause is an error when processing malformed HTTPS requests during authentication configured via aaa authentication match or aaa authentication include, which can allow remote attackers t...
CVE-2006-0964
CVE-2006-0964 affects the NCP Network Communication Secure Client 8.11 Build 146 (and possibly other versions). The vulnerability is that the Client Firewall can be bypassed locally by replacing an allowed program with an arbitrary program, allowing a local attacker to bypass firewall execution r...
CVE-2005-0964
Kerio Personal Firewall 4.1.2 and earlier has a local bypass vulnerability where a malicious process impersonates a legitimate, less-restricted process to bypass firewall rules. This can allow local users to circumvent protections. The CVE entry notes a MEDIUM impact (base score 4.6); no specific...
CVE-2004-0964
CVE-2004-0964 concerns Zinf Audio Player. The available connected sources confirm a stack/buffer overflow vulnerability in Zinf Audio Player 2.2.1 (Windows) and older Linux builds triggered by crafted .pls files. Affected component: PLS file handling in Zinf; root cause: insufficient bounds check...
CVE-2003-0964
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2002-0964
Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via multiple responses to the initial challenge with different cdkey values, which reaches the player limit and prevents other players from connecting until the original responses have...
CVE-2002-0964
The CVE-2002-0964 entry describes a denial-of-service vulnerability in Half-Life Server 1.1.1.0 and earlier. The root cause is a remote attacker sending multiple responses to the initial challenge using different cd_key values, exhausting server resources and reaching the player limit, preventing...
CVE-2001-0964
Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command...
CVE-2001-0964
The CVE-2001-0964 entry concerns the Half-Life client (versions 1.1.0.8 and earlier). The vulnerability is a buffer overflow in the client triggered by a long console command, allowing a malicious remote server to execute arbitrary code on the affected system. The impact is remote code execution ...
CVE-2000-0964
The CVE-2000-0964 entry concerns the HiNet LP5100 IP-phone. The affected component is the web administration service, and the root cause is a buffer overflow triggered by a long GET request. The documented impact is a denial of service and potential execution of arbitrary commands by remote attac...
CVE-1999-0964
CVE-1999-0964: Buffer overflow in FreeBSD libc setlocale triggered by a long PATH_LOCALE environment variable. The flaw enables local attackers to execute arbitrary code, with impacts listed as complete confidentiality, integrity and availability. Root cause is a buffer overflow in setlocale; no ...
