133 matches found
isc-dhcpd -- format string vulnerabilities
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-1006
Cross-site scripting XSS vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page...
CVE-2008-1006
Cross-site scripting XSS vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page...
CVE-2008-1006
CVE-2008-1006 is a cross-site scripting (XSS) vulnerability in WebCore used by Apple Safari before 3.1. The underlying issue is in WebKit/WebCore where the window.open function can change the security context of a page, enabling remote attackers to inject arbitrary script or HTML in the victim’s ...
openSUSE 10 Security Update : ekiga (ekiga-3023)
This update fixes format string problems in ekiga. CVE-2007-1006 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ekiga-3023. The text description of this plugin is C SUSE LLC...
GLSA-200703-25 : Ekiga: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200703-25 Ekiga: Format string vulnerability Mu Security has discovered that Ekiga fails to implement formatted printing correctly. Impact : An attacker could exploit this vulnerability to crash Ekiga and potentially execute...
Critical: Red Hat Security Advisory: ekiga security update
Updated ekiga packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Ekiga is a tool to communicate with video and audio over the Internet. Format string flaws were...
Format string
Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006...
Debian DSA-1006-1 : wzdftpd - missing input sanitising
'kcope' discovered that the wzdftpd FTP server lacks input sanitising for the SITE command, which may lead to the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
Tamarack MMSd components fail to properly handle malformed packets
Overview Tamarack MMSd components do not properly handle malformed RFC 1006 packets. This vulnerability may allow a remote, unauthenticated attacker to cause a denial of service condition. Description ISO Transport Service over TCP TPKT, RFC 1006 RFC 1006 specifies how to run the OSI transport...
CVE-2006-0059
The CVE-2006-0059 issue affects LiveData ICCP Server’s RFC 1006 (ISO Transport Service over TCP) implementation prior to version 5.00.035. A heap-based buffer overflow caused by processing malformed ICCP packets can allow a remote attacker to crash the server or potentially execute arbitrary code...
[SA20146] LiveData ICCP Server Buffer Overflow Vulnerability
TITLE: LiveData ICCP Server Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA20146 VERIFY ADVISORY: http://secunia.com/advisories/20146/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: LiveData ICCP Server 5.x http://secunia.com/product/9997/ DESCRIPTION: A vulnerabilit...
LiveData ICCP Server heap buffer overflow vulnerability
Overview LiveData ICCP Server contains a heap-based buffer overflow. This vulnerability may allow a remote attacker to crash the server. Description Inter-Control Center Communications Protocol ICCP According to the LiveData ICCP Server white paper: The Inter-Control Center Communications Protoco...
CVE-2006-1006
The CVE-2006-1006 entry describes multiple SQL injection vulnerabilities in the sendcard.php component of the SendCard package up to version 3.3.0. The underlying issue is unsafe handling of input parameters (reported as “unspecified parameters”), enabling remote attackers to execute arbitrary SQ...
FreeBSD : isc-dhcpd -- format string vulnerabilities (ccd325d2-fa08-11d9-bc08-0001020eed82)
The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary code with the permissions of the DHCP programs, typically root for the DHCP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
SonicWALL SOHO Web Interface Multiple Remote Input Validation Vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the URL or 2 the user login name, which is not filtered when the administrator views the log file. CVE: CVE-2005-1006 Last updated: July 11, 2017, 1:32 a...
CVE-2005-1006
SonicWALL SOHO Web Interface (SOHO 5.1.7.0) is affected by multiple XSS vulnerabilities where an attacker can inject arbitrary script/HTML via the request URL or the login name, which is not filtered when an administrator views the log file. The CVE-2005-1006 entry is corroborated by multiple sou...
CVE-2004-1006
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702...
CVE-2004-1006
CVE-2004-1006 affects ISC DHCP’s dhcpd (dhcp 2.x). A format-string vulnerability in the logging code (errwarn/calls in log paths) could allow a remote DNS server to trigger arbitrary code execution with the dhcpd’s privileges. Public references (RHSA-2005:212, Debian DSA-584-1, CERT/US-CERT entri...