109 matches found
CVE-2011-1076
net/dnsresolver/dnskey.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service NULL pointer dereference and OOPS by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error...
CVE-2011-1076
CVE-2011-1076 affects the Linux kernel up to 2.6.37 in dns_key.c; remote DNS servers sending invalid responses can trigger a NULL pointer dereference/OOPS, leading to a denial of service. Reports from SUSE/Red Hat/NVD corroborate. Remediation: upgrade to kernel 2.6.38 or newer (vendor patches). E...
Linux Kernel "dns_key.c"空指针引用拒绝服务漏洞
BUGTRAQ ID: 46732 CVE ID: CVE-2011-1076 Linux Kernel是Linux操作系统的内核。 Linux Kernel在dnskey.c的实现上存在空指针引用拒绝服务漏洞，远程攻击者利用此漏洞使内核引用无效内存位置，造成拒绝服务。 在DNS解析程序密钥用错误提示实例化时，尝试读取该密钥可造成崩溃。因为userread以为这里会有一个负载，但事实上没有。 Linux kernel 2.6.x Ubuntu Ubuntu 11.04 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Ubuntu: Security Advisory (USN-1076-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 9.10 / 10.04 LTS / 10.10 : clamav vulnerability (USN-1076-1)
It was discovered that the Microsoft Office processing code in libclamav improperly handled certain Visual Basic for Applications VBA data. This could allow a remote attacker to craft a document that could crash clamav or possibly execute arbitrary code. In the default installation, attackers wou...
CVE-2010-1076
The CVE-2010-1076 entry concerns an XSS in Entry Level CMS (EL CMS): index.php allows remote injection of arbitrary script/HTML via the subj parameter when handling a forced SQL error message. This is documented across multiple sources (NVD, Red Hat, CVE list, etc.). Details specify the vulnerabl...
CVE-2009-1076
Sun Java System Identity Manager IdM 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...
CVE-2009-1076
CVE-2009-1076 affects Sun Java System Identity Manager (IdM) 7.0 through 8.0. The end-user login flow based on a question, when used with IDMROOT/questionLogin.jsp?accountId=USER, reveals different responses depending on whether USER exists. This behavior enables remote attackers to enumerate val...
CentOS Update for python-docs CESA-2007:1076 centos3 i386
Check for the Version of python-docs OpenVAS Vulnerability Test CentOS Update for python-docs CESA-2007:1076 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
CentOS Update for python-docs CESA-2007:1076 centos3 x86_64
Check for the Version of python-docs OpenVAS Vulnerability Test CentOS Update for python-docs CESA-2007:1076 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a 1 mail message or 2 discussion board message. NOTE: this might overlap CVE-2005-1076...
CVE-2008-1076
CVE-2008-1076 describes a Cross-site Scripting (XSS) vulnerability in Interspire Shopping Cart 1.x, where an attacker can inject arbitrary script via the search_query parameter in search.php. The root cause is improper handling/sanitization of the search_query input, enabling script execution in ...
Debian DSA-1076-1 : lynx - programming error
Michal Zalewski discovered that lynx, the popular text-mode WWW Browser, is not able to grok invalid HTML including a TEXTAREA tag with a large COLS value and a large tag name in an element that is not terminated, and loops forever trying to render the broken HTML. %NASLMINLEVEL 70300 C Tenable...
Winlpd 1.2 Build 1076 - Remote Buffer Overflow
!/usr/bin/perl A proof of concept Remote Buffer Overflow Exploit App Vulnerable: Winlpd 1.2 Build 1076 - rabox.com Possibe some problems with WinXP if exploit doesn't work correctly, try another number in var 'loop'. Buffer size 524 bytes. Author: Pablo Isola - [email protected] Neuquen ...
CVE-2006-1076
SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board IPB 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter...
CVE-2006-1076
CVE-2006-1076 affects Invision Power Board (IPB) 2.1.5. The vulnerability is a SQL injection in index.php during a showtopic-like operation, exploitable via the st parameter , allowing remote attackers to execute arbitrary SQL commands. The connected documents do not provide a patch or specific r...
CVE-2005-1076
CVE-2005-1076 describes a cross-site scripting (XSS) vulnerability in the WebCT Campus Edition 4.1 discussion board, allowing an attacker to inject arbitrary script/HTML via the message field. The connected Red Hat and CVE-2008-1225 records corroborate XSS in WebCT 4.1.5.8 and note potential over...
CVE-2003-1076
CVE-2003-1076 affects Solaris 7–9 sendmail. The issue arises from how .forward files are processed, allowing a local user to cause a denial of service and potentially gain privileges through crafted constructs in a .forward file. The NVD entry specifies a local attack vector with high impact (com...