SuSE 10 Security Update : xorg-x11 (ZYPP Patch Number 7002)

X clients could cause a memory corruption in the X Render extension which crashes the X server CVE-2010-1166. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

openSUSE Security Update : xorg-x11-Xvnc (openSUSE-SU-2010:0583-1)

This update fixes a memory corruption in the X Render extension in the X server. CVE-2010-1166: The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service memory corruption and daemon crash or possib...

SuSE9 Security Update : XFree86 (YOU Patch Number 12612)

X clients could cause a memory corruption in the X Render extension which crashes the X server CVE-2010-1166. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Ubuntu Update for xorg-server vulnerabilities USN-939-1

Ubuntu Update for Linux kernel vulnerabilities USN-939-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9391.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for xorg-server vulnerabilities USN-939-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[Suspected Spam][USN-939-1] X.org vulnerabilities

=========================================================== Ubuntu Security Notice USN-939-1 May 18, 2010 xorg-server vulnerabilities CVE-2009-1573, CVE-2010-1166 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS...

Ubuntu 8.04 LTS / 9.04 / 9.10 : xorg-server vulnerabilities (USN-939-1)

Loic Minier discovered that xvfb-run did not correctly keep the X.org session cookie private. A local attacker could gain access to any local sessions started by xvfb-run. Ubuntu 9.10 was not affected. CVE-2009-1573 It was discovered that the X.org server did not correctly handle certain...

USN-939-1: X.org vulnerabilities

Loïc Minier discovered that xvfb-run did not correctly keep the X.org session cookie private. A local attacker could gain access to any local sessions started by xvfb-run. Ubuntu 9.10 was not affected. CVE-2009-1573 It was discovered that the X.org server did not correctly handle certain...

RHEL 5 : xorg-x11-server (RHSA-2010:0382)

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

RedHat Update for xorg-x11-server RHSA-2010:0382-01

Check for the Version of xorg-x11-server OpenVAS Vulnerability Test RedHat Update for xorg-x11-server RHSA-2010:0382-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CVE-2010-1166

CVE-2010-1166 details (connected documents): The fault lies in the X.Org X11 server Render extension’s fbComposite implementation (fbpict.c), where an incorrect macro definition can lead to memory corruption, enabling denial of service or possibly remote code execution for remote-authenticated us...

CVE-2009-1166

CVE-2009-1166 affects Cisco Wireless LAN Controllers (WLCs) across multiple series (1500/2000/2100/4100/4200/4400, WiSM, ISR WLAN modules, Catalyst 3750G WLC). The vulnerability arises from crafting an HTTP/HTTPS request to the administrative interface, enabling a remote attacker to cause a denia...

CVE-2008-1166

CVE-2008-1166 relates to Flyspray 0.9.9.4, where authentication errors reveal whether a username is valid or invalid. The description in the CVE entry and corroborating records state that this behavior enables remote attackers to enumerate usernames. The connected documents corroborate Flyspray a...

Debian Security Advisory DSA 1166-1 (cheesetracker)

The remote host is missing an update to cheesetracker announced via advisory DSA 1166-1. Luigi Auriemma discovered a buffer overflow in the loading component of cheesetracker, a sound module tracking program, which could allow a maliciously constructed input file to execute arbitrary code. OpenVA...

RHEL 4 : libexif (RHSA-2007:1166)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1166 advisory. - libexif integer overflow CVE-2007-6352 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Debian DSA-1166-2 : cheesetracker - buffer overflow

Luigi Auriemma discovered a buffer overflow in the loading component of cheesetracker, a sound module tracking program, which could allow a maliciously constructed input file to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2006-1166

CVE-2006-1166 affects Monotone 0.25 and earlier. When a user creates a file in a directory named “mt” and later checks out that file on a case-insensitive filesystem (e.g., Windows or macOS), the file is placed into the bookkeeping directory “MT.” This behavior could allow context-dependent attac...

CVE-2003-1166

CVE-2003-1166 describes a directory traversal vulnerability in HTTP Commander 4.0. The flaw affects the Openfile.aspx and Html.aspx components, where a .. (dot dot) in the file parameter can be used to view arbitrary files (remote access). Root cause: insufficient validation of the file parameter...

CVE-2005-1166

The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain sensitive information...

CVE-2005-1166

The CVE-2005-1166 entry concerns DameWare NT Utilities (DNTUS26) and MiniRemote Control (DWRCS) up to version 4.9, where the username and password are stored in memory in plaintext. This in-memory credential exposure could allow a local attacker to obtain sensitive information. The connected sour...