CentOS 5 : kernel (CESA-2010:0398)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2010-1085

CVE-2010-1085 affects the Linux kernel before 2.6.32.x/2.6.33-rc4 on the AMD780V chipset. The vulnerability is in the azx_position_ok function in hda_intel.c, where certain inputs can trigger a divide-by-zero and cause a crash (DoS). Public advisories from MiracleLinux and Oracle Linux list this ...

CVE-2009-1085

CVE-2009-1085 affects Piwik 0.2.32 and earlier. The issue is improper access control that stores sensitive information (including the API key) under the web root, enabling remote attackers to obtain it via a direct request for misc/cron/archive.sh. The connected records confirm the same descripti...

CVE-2009-1085

Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh...

Secunia Research: Internet Explorer Data Stream Handling Vulnerability

====================================================================== Secunia Research 08/04/2008 - Internet Explorer Data Stream Handling Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft IE数据流处理远程代码执行漏洞（MS08-024）

BUGTRAQ ID: 28552 CVECAN ID: CVE-2008-1085 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在处理数据流时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 如果用户使用Internet Explorer查看了特制网页，网页就可能返回没有注册处理器的非预期MIME类型数据流，触发释放后使用的情况，导致执行任意代码。帐户被配置为拥有较少用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1...

Microsoft Windows DNS客户端可预测事件处理ID漏洞（MS08-020）

BUGTRAQ ID: 28553 CVECAN ID: CVE-2008-1085 Microsoft Windows是微软发布的非常流行的操作系统。 Windows DNS客户端服务在执行DNS查询时，随机选择事件处理值没有提供足够的熵。未经认证的攻击者可以向有漏洞客户端的DNS请求返回恶意响应，欺骗或重新定向合法位置的Internet通讯。 Microsoft Windows XP SP2 Microsoft Windows Vista Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1...

CVE-2008-1085

CVE-2008-1085 is corroborated by connected docs as a remote code execution risk in Internet Explorer across multiple versions and Windows releases, addressed by MS08-024 (Cumulative Security Update for IE). The MSKB KB947864 summary notes that this update resolves vulnerabilities that could allow...

MS08-024: Cumulative Security Update for Internet Explorer (947864)

The remote host is missing the IE cumulative security update 947864. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31797;...

Debian Security Advisory DSA 1085-1 (lynx-ssl)

The remote host is missing an update to lynx-ssl announced via advisory DSA 1085-1. Several vulnerabilities have been discoverd in lynx, the popular text-mode WWW browser. The Common Vulnerabilities and Exposures Project identifies the following vulnerabilities: CVE-2004-1617 Michal Zalewski...

Debian: Security Advisory (DSA-1085-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1085-1 : lynx-cur - several vulnerabilities

Several vulnerabilities have been discovered in lynx, the popular text-mode WWW browser. The Common Vulnerabilities and Exposures Project identifies the following vulnerabilities : - CVE-2004-1617 Michal Zalewski discovered that lynx is not able to grok invalid HTML including a TEXTAREA tag with ...

CVE-2006-1085

PHP-Stats 0.1.9.1 and earlier is affected by CVE-2006-1085. An authentication bypass allows remote attackers to gain administrator privileges and execute arbitrary PHP code by altering option[admin_pass] and setting pass_cookie to the MD5 hash of the target password. This vector can be used in co...

CVE-2006-1085

admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbitrary PHP code by modifying the optionadminpass parameter and setting the passcookie to the MD5 hash of the specified password...

CVE-2004-1085

The CVE-2004-1085 vulnerability affects Apple Mac OS X 10.3.6 HIToolBox. It allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode. The provided documents do not include any exploit details or remediation steps. No broader impact ...

CVE-2004-1085

Human Interface Toolbox HIToolBox for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode...

CVE-2005-1085

CVE-2005-1085 : The vulnerability is a cross-site scripting (XSS) issue in the aeDating 3.2 control panel that allows remote attackers to inject arbitrary web script or HTML. Connected sources (NVD, Red Hat, CVE listings) reiterate the same description without providing technical details such as ...

CVE-2003-1085

The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a denial of service unstable service via a long GET request, possibly caused by a buffer overflow...

CVE-2003-1085

The CVE concerns the HTTP server in Thomson cable modems TWC305, TWC315, and TCW690 (ST42.03.0a). The vulnerability allows remote attackers to cause a denial of service (unstable service) via a long GET request, potentially due to a buffer overflow. No exploitation details are provided in the con...

CVE-2004-1085

Human Interface Toolbox HIToolBox for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode...