Debian Security Advisory DSA 1122-1 (libnet-server-perl)

The remote host is missing an update to libnet-server-perl announced via advisory DSA 1122-1. Peter Bieringer discovered that the log function in the Net::Server Perl module, an extensible, general perl server engine, is not safe against format string exploits. The old stable distribution woody...

CVE-2007-1127

CVE-2007-1127 describes a directory traversal in shopkitplus: enc/stylecss.php accepts a changetheme parameter and can be coerced with .. to read arbitrary files. NVD lists CVSS v2.0 base score 6.4 (Medium) with network attack vector and no authentication, confidentiality and integrity partially ...

Debian DSA-1122-1 : libnet-server-perl - format string

Peter Bieringer discovered that the 'log' function in the Net::Server Perl module, an extensible, general perl server engine, is not safe against format string exploits. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Debian DSA-1121-1 : postgrey - format string

Peter Bieringer discovered that postgrey, a greylisting implementation for Postfix, is vulnerable to a format string attack that allows remote attackers to cause a denial of service to the daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SECURITY] [DSA 1122-1] New Net::Server packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1122-1 [email protected] http://www.debian.org/security/ Martin Schulze July 24th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1121-1] New postgrey packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1121-1 [email protected] http://www.debian.org/security/ Martin Schulze July 24th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1127

CVE-2006-1127 describes a cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2. A remote attacker can inject arbitrary script/HTML through the X-Forwarded-For header when adding a comment to an album. Reported sources (e.g., Exploit-DB/Nessus entries) corroborate multiple Gallery 2 v...

CVE-2005-1127

CVE-2005-1127 covers a format-string vulnerability in the log function of the perl-Net-Server module (versions ≤ 0.87) as used by Postfix Greylisting Policy Server (Postgrey) ≤ 1.18. The issue arises from format specifiers not being properly handled before sending to syslog, allowing remote attac...

CVE-2003-1127

Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor...

CVE-2004-1127

Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command...

CVE-2004-1127

Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command...

CVE-2004-1127

CVE-2004-1127 corresponds to a buffer overflow in Open DC Hub 0.7.14 that allows a remote attacker with administrator privileges to execute arbitrary code via a long RedirectAll command. Technical entries from connected docs confirm Open DC Hub as the affected software, with the root cause being ...

CVE-2003-1127

Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor...

CVE-2002-1127

CVE-2002-1127: Buffer overflow in uucp for Compaq Tru64/OSF1 3.x enables local users to execute arbitrary code via a long source (-s) argument. Root cause: unchecked buffer handling in uucp. Affected: Tru64/OSF1 3.x; component: uucp. Impact: local code execution; data confidentiality/integrity/av...

CVE-2001-1127

Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via 1 proapsv, 2 mprosrv, 3 mprshut, 4 orarx, 5 sqlcpp, 6 probrkr, 7 sqlschema and 8 sqldump...

CVE-2001-1127

CVE-2001-1127 describes a buffer overflow in Progress Database 8.3D and 9.1C that could let a local user execute arbitrary code via the eight entry points: _proapsv, _mprosrv, _mprshut, orarx, sqlcpp, _probrkr, _sqlschema, and _sqldump. The NVD entry assigns a base score 7.2 (HIGH) with LOCAL att...

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

CVE-1999-1127

CVE-1999-1127 affects Windows NT 4.0. The vulnerability stems from improper handling of invalid named pipe RPC connections, leading to resource exhaustion and a denial of service when a remote attacker establishes a sequence of connections sending malformed data. The issue is tied to the shutdown...

CVE-2001-1127

Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via 1 proapsv, 2 mprosrv, 3 mprshut, 4 orarx, 5 sqlcpp, 6 probrkr, 7 sqlschema and 8 sqldump...

CVE-2000-1127

registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable...