104 matches found
CentOS 4 : evolution28 (CESA-2008:0515)
Updated evolution28 packages that address two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring,...
CVE-2008-1109
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...
CVE-2008-1109
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...
CVE-2008-1109
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...
CVE-2008-1109
CVE-2008-1109 affects Evolution (GNOME mail/calendar client), with a heap-based buffer overflow in parsing iCalendar attachments. If a user opens a crafted meeting reply containing an overly long "+DESCRIPTION" property, arbitrary code could be executed under the user’s privileges. The issue is t...
Debian Security Advisory DSA 713-1 (junkbuster)
The remote host is missing an update to junkbuster announced via advisory DSA 713-1. OpenVAS Vulnerability Test $Id: deb7131.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 713-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-713-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1109-1 (rssh)
The remote host is missing an update to rssh announced via advisory DSA 1109-1. Russ Allbery discovered that rssh, a restricted shell, performs insufficient checking of incoming commands, which might lead to a bypass of access restrictions. OpenVAS Vulnerability Test $Id: deb11091.nasl 6616...
CVE-2007-1109
Multiple cross-site scripting XSS vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 login or 2 mailaddress field in Register.php, or the 3 searchauthor, 4 mode, 5 startyear, 6 endyear, or 7 datetype field in Search.php, a different...
CVE-2007-1109
CVE-2007-1109 describes multiple cross-site scripting (XSS) vulnerabilities in PhpwebGallery 1.4.1. The published description identifies vectors in Register.php (fields: login, mail_address) and in Search.php (fields: search_author, mode, start_year, end_year, date_type). A related entry (CVE-200...
CVE-2006-1109
CVE-2006-1109: SQL injection vulnerability in index.asp of Total Ecommerce 1.0 via the id parameter allows remote arbitrary SQL execution. Root cause described as an injection vulnerability; exploitation details are not provided in the connected documents. No remediation steps, affected version i...
CVE-2005-1109
CVE-2005-1109 affects JunkBuster (before 2.0.2-r3): the URL filtering fails, allowing remote attackers to cause an application crash (DoS) and possibly execute arbitrary code via heap corruption. Remediation: upgrade to 2.0.2-r3 or later, per public descriptions. Exploitation details are not prov...
CVE-2003-1109
The Session Initiation Protocol SIP implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages...
CVE-2004-1109
The CVE-2004-1109 entry concerns the FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier. A crafted TCP, UDP, or ICMP packet with a zero-length IP Option field can trigger an infinite loop, causing CPU consumption and a system freeze (DoS) on vulnerable systems. Affected component: FWDR...
Debian DSA-036-1 : Midnight Commander - arbitrary program execution
It has been reported that a local user could tweak Midnight Commander of another user into executing an arbitrary program under the user id of the person running Midnight Commander. This behaviour has been fixed by Andrew V. Samoilov. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2002-1109
securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service CPU consumption via a malformed TAR file, possibly via an incorrect file size parameter...
Cisco SIP Crafted INVITE Message Handling DoS (CSCdz39284, CSCdz41124)
It is possible to make the remote IOS crash when sending it malformed SIP packets. These vulnerabilities are documented as CISCO bug id CSCdz39284 and CSCdz41124. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11380; scriptversion"1.21"; scriptcveid"CVE-2003-1109";...
CVE-2002-1109
securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service CPU consumption via a malformed TAR file, possibly via an incorrect file size parameter...
CVE-2001-1109
EFTP 2.0.7.337 is affected by a directory traversal vulnerability that allows remote authenticated users to reveal directory contents by injecting dot-dot sequences in LIST, QUOTE SIZE, and QUOTE MDTM commands. Multiple security tools summarize this as an information-disclosure flaw (installation...
CVE-1999-1109
The vulnerability CVE-1999-1109 affects Sendmail 8.x prior to 8.10.0. It allows remote attackers to cause a denial of service by sending a sequence of ETRN commands, then disconnecting; the server reportedly continues to process the commands after the connection is terminated. The available docum...