207 matches found
CVE-2012-1016
The pkinitserverreturnpadata function in plugins/preauth/pkinit/pkinitsrv.c in the PKINIT implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.10.4 attempts to find an agility KDF identifier in inappropriate circumstances, which allows remote attackers to cause a...
CVE-2012-1016
CVE-2012-1016 affects MIT Kerberos 5 PKINIT in the KDC, where pkinit_server_return_padata may mis-handle an agility KDF check under crafted Draft 9 requests, enabling a remote attacker to trigger a NULL pointer dereference and daemon crash (DoS). Affected: krb5 PKINIT prior to version 1.10.4. Mit...
Oracle BEA WebLogic Server Client Certificate Buffer Overflow (CVE-2009-1016)
There exists a buffer overflow vulnerability in BEA WebLogic Server Plugins...
RedHat Update for kernel RHSA-2011:0498-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2011:0498-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7515)
This kernel update for the SUSE Linux Enterprise 10 SP4 kernel fixes several security issues and bugs. The following security issues were fixed : - The code for evaluating LDM partitions in fs/partitions/ldm.c contained bugs that could crash the kernel for certain corrupted LDM partitions...
Debian DSA-2240-1 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3875 Vasiliy Kulikov discovered an issue in the Linux implementation of th...
[SECURITY] [DSA 2240-1] linux-2.6 security update
---------------------------------------------------------------------- Debian Security Advisory DSA-2240-1 [email protected] http://www.debian.org/security/ dann frazier May 24, 2011 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
DSA-2240-1 linux-2.6 - several issues
Bulletin has no description...
Oracle Linux 6 Unbreakable Enterprise kernel security fix update
2.6.32-100.28.15.el6 - sctp: fix to calc the INIT/INIT-ACK chunk length correctly is set CVE-2011-1573 - dccp: fix oops on Reset after close CVE-2011-1093 - bridge: netfilter: fix information leak CVE-2011-1080 - Bluetooth: bnep: fix buffer overflow CVE-2011-1079 - net: don't allow CAPNETADMIN to...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Updated kernel packages that fix several security issues, various bugs, and add an enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, whic...
SuSE 11 Security Update : Websphere Community Edition (SAT Patch Number 1016)
This update of WebSphere fixes the following vulnerabilities : - GERONIMO-3838: close potential denial of service attack - fix Apache Geronimo web administration console directory traversal vulnerabilities. CVE-2008-5518 - fix Apache Geronimo web administration console XSS vulnerabilities...
CVE-2011-1016
CVE-2011-1016 concerns the Linux kernel Radeon GPU drivers and their DRM subsystem. The affected component is the Radeon GPU driver (radeon/kms) in kernels before 2.6.38-rc5, where data related to the AA resolve registers was not properly validated. This could allow a local user to write to arbit...
CVE-2009-0190
This CVE-2009-0190 entry is rejected; refer to CVE-2009-1016.
Microsoft Internet Explorer - isComponentInstalled Overflow (Metasploit)
$Id: ieiscomponentinstalled.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2006-1016
creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16549 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ieiscomponentinstalled.rb 2025-02-06...
CVE-2010-1016
CVE-2010-1016 affects the SAV Filter Selectors extension for TYPO3, prior to version 1.0.5. The vulnerability is a SQL injection in the extension, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component is the sav_filter_selectors module and the und...
CentOS 5 : enscript (CESA-2008:1016)
An updated enscript packages that fixes several security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU enscript converts ASCII files to PostScriptR language files and spools the...
CVE-2009-1016
CVE-2009-1016 concerns a buffer overflow in BEA/Oracle WebLogic Server Plugins related to parsing SSL certificates. The vulnerability affects WebLogic Server Plug-ins across multiple BEA/Oracle versions and can be triggered by a crafted certificate, potentially impacting confidentiality, integrit...
enscript security update
CentOS Errata and Security Advisory CESA-2008:1016 An updated enscript packages that fixes several security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU enscript converts ASCII file...
Apple QuickTime多个远程安全漏洞
BUGTRAQ ID: 28583 CVECAN ID: CVE-2008-1013,CVE-2008-1014,CVE-2008-1015,CVE-2008-1016,CVE-2008-1017,CVE-2008-1018,CVE-2008-1019,CVE-2008-1020,CVE-2008-1021,CVE-2008-1022,CVE-2008-1023 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime的7.4.5之前版本存在多个安全漏洞,允许用户通过畸形的媒体文件获得敏感信息或完全入侵用户系统。 CVE-2008-1013...