CentOS 5 : kernel (CESA-2010:0398)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

[SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2053-1 [email protected] http://www.debian.org/security/ dann frazier May 25, 2010 http://www.debian.org/security/faq -...

CVE-2010-1086

The CVE-2010-1086 entry concerns the Linux kernel (dvb-core) ULE decapsulation code in dvb_net.c. A vulnerability in the ULE Payload Pointer handling allows an attacker to induce an infinite-loop denial of service via a crafted MPEG-2 TS frame, affecting kernel 2.6.33 and earlier. Connected advis...

openSUSE Security Update : unbound (unbound-840)

This update fixes a heap-based buffer overflow in the ldnsrrnewfrmstrinternal function. This allowed remote attackers to cause a denial of service and possibly execute arbitrary code via a DNS resource record RR with a long class field and possibly TTL field. CVE-2009-1086 %NASLMINLEVEL 70300 C...

Debian Security Advisory DSA 1795-1 (ldns)

The remote host is missing an update to ldns announced via advisory DSA 1795-1. OpenVAS Vulnerability Test $Id: deb17951.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1795-1 ldns Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1795-1 : ldns - buffer overflow

Stefan Kaltenbrunner discovered that ldns, a library and set of utilities to facilitate DNS programming, did not correctly implement a buffer boundary check in its RR DNS record parser. This weakness could enable overflow of a heap buffer if a maliciously-crafted record is parsed, potentially...

[SECURITY] [DSA 1795-1] New ldns packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1795 [email protected] http://www.debian.org/security/ Devin Carraway May 07, 2009 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2009-1086

CVE-2009-1086 affects ldns: a heap-based buffer overflow in ldns_rr_new_frm_str_internal in ldns 1.4.x can be triggered by a DNS RR with a long class field (and possibly TTL), leading to denial of service and potential arbitrary code execution. Public docs indicate the issue arises during parsing...

CVE-2008-1086

The CVE-2008-1086 issue concerns the hxvz.dll ActiveX control (HxTocCtrl) used by Microsoft Help 2.5 and exposed in Internet Explorer on Windows XP SP2, Server 2003 SP1/SP2, Vista SP1, and Server 2008. The vulnerability is a memory corruption flaw triggered by malformed arguments to the ActiveX c...

Internet Explorer ActiveX Control hxvz.dll Memory Corruption (MS08-023; CVE-2008-1086)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The flaw is located in the ActiveX Controls of the component hxvz.dll. The vulnerability is due to a memory corruption error in Microsoft Internet Explorer. A remote attacker could exploit this issue by...

Debian Security Advisory DSA 1086-1 (xmcd)

The remote host is missing an update to xmcd announced via advisory DSA 1086-1. The xmcdconfig creates directories world-writeable allowing local users to fill the /usr and /var partition and hence cause a denial of service. This problem has been half-fixed since version 2.3-1. For the old stable...

CVE-2007-1086

IBM DB2 vulnerable components: 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2. Local users can create or modify arbitrary files via unsafe file access controlled by unspecified environment variables. Root cause: environment-variable handling allows file writes. Impact is limited to local atta...

Debian DSA-1086-1 : xmcd - design flaw

The xmcdconfig creates directories world-writeable allowing local users to fill the /usr and /var partition and hence cause a denial of service. This problem has been half-fixed since version 2.3-1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

CVE-2006-1086

...

CVE-2006-1086

CVE-2006-1086 is a duplicate of CVE-2006-1083 and has been marked as a duplicate/DO NOT USE this candidate. The connected CVE-2006-1083 describes multiple directory traversal vulnerabilities in PHP-Stats 0.1.9.1 and earlier, allowing remote attackers to read and possibly execute arbitrary files v...

CVE-2004-1086

Technical details about CVE-2004-1086 are not publicly available in the provided connected documents; no specific affected product versions beyond Mac OS X 10.3.6 are disclosed. Monitor for updates.

CVE-2005-1086

The CVE-2005-1086 entry concerns AN HTTPD Server 1.42n, specifically the cmdIS.DLL plugin. The issue is a buffer overflow in the plugin when processing an HTTP request with a long User-Agent header, enabling remote code execution. The available documents identify the vulnerable component and caus...

CVE-2003-1086

CVE-2003-1086 is a PHP remote file inclusion vulnerability in pm/lib.inc.php affecting pMachine Free and pMachine Pro 2.2/2.2.1. The issue arises from unvalidated pm_path, allowing an attacker to reference a remote URL containing PHP code and execute it on the server. Impact is remote code execut...

CVE-2004-1086

Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file...

CVE-2003-1086

PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pmpath parameter to reference a URL on a remote web server that contains the code...