122 matches found
openSUSE 10 Security Update : java-1_4_2-sun (java-1_4_2-sun-5130)
Sun Java was updated to 1.4.2u17 to fix following security vulnerabilities : - CVE-2008-1158: Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers...
Critical: Red Hat Security Advisory: java-1.5.0-sun security update
Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Java Runtime Environment JRE contains the...
CVE-2008-1189
Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the "third" issue...
Buffer overflow
Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with 1 a long key name in the xml header or 2 a long charset value, different issu...
CVE-2007-1189
CVE-2007-1189 : Concrete details show an integer overflow in the Plan 9 kernel’s envwrite function (Alcatel-Lucent Bell Labs Plan 9) that can be triggered by a large n argument. This vulnerability allows local users to overwrite kernel memory, with demonstrated effects including privilege escalat...
Debian DSA-1189-1 : openssh-krb5 - several vulnerabilities
Several remote vulnerabilities have been discovered in OpenSSH, a free implementation of the Secure Shell protocol, which may lead to denial of service and potentially the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : -...
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability By Sowhat of Nevis Labs Date: 2006.04.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060411.txt http://www.microsoft.com/technet/security/bulletin/MS06-013.mspx CVE: CVE-2006-1189 Vendor Microsoft Inc. Product...
[Full-disclosure] Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability By Sowhat of Nevis Labs Date: 2006.04.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060411.txt http://www.microsoft.com/technet/security/bulletin/MS06-013.mspx CVE: CVE-2006-1189 Vendor Microsoft Inc. Product...
CVE-2006-1189
Microsoft Internet Explorer suffers a remote code execution vulnerability (CVE-2006-1189) due to a buffer overflow in URLMON.DLL when parsing IDNs in double-byte character sets (DBCS). Affected browsers include IE 5.01 SP4 and IE6 across Windows 98/ME/2000/XP/Server 2003, including IE6 SP1 in var...
WebcamXP Chat Name XSS
The remote host is running a version of webcamXP, a webcam software package and integrated web server for Windows, that suffers from an HTML injection flaw in its chat feature. An attacker can exploit this flaw by injecting malicious HTML and script code through the nickname field to redirect cha...
CVE-2005-1189
CVE-2005-1189 affects WebcamXP PRO (version 2.16.468 and earlier). The vulnerability is a cross-site scripting (XSS) flaw in the chat feature that allows remote attackers to inject arbitrary HTML/script via the chat name, demonstrated by using an IFRAME to redirect users to other sites. The NVD r...
RHEL 4 : krb5 (RHSA-2005:045)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:045 advisory. Kerberos is a networked authentication system that uses a trusted third party a KDC to authenticate clients and servers to each other. A heap based...
CVE-2004-1189
The addtohistory function in svrprincipal.c in libkadm5srv for MIT Kerberos 5 krb5 up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow...
CVE-2004-1189
The addtohistory function in svrprincipal.c in libkadm5srv for MIT Kerberos 5 krb5 up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow...
CVE-2004-1189
The addtohistory function in svrprincipal.c in libkadm5srv for MIT Kerberos 5 krb5 up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow...
CVE-2004-1189
The CVE-2004-1189 issue affects MIT Kerberos 5 (krb5) up to version 1.3.5. The add_to_history function in svr_principal.c during a password change fails to properly track the password policy history count and the maximum number of keys, which can lead to an array index out-of-bounds and a heap-ba...
CVE-2002-1189
The CVE-2002-1189 issue affects Cisco Unity 2.x and 3.x where default configuration fails to block international operator calls in predefined restriction tables, enabling authenticated users to place international calls via call forwarding. The root cause is the misconfiguration of restrictions r...
CVE-1999-1189
The CVE-1999-1189 issue affects Netscape Navigator/Communicator 4.7 on Windows 95/98. A buffer overflow can be triggered by a long argument after the ? in a URL referencing .asp, .cgi, .html, or .pl, allowing remote denial of service and potentially arbitrary command execution. No remediation det...
CVE-2001-1189
IBM WebSphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, enabling local users to retrieve passwords via a JSP script. Affected software: IBM WebSphere Application Server prior to 3.5.3. Root cause: credentials stored in cleartext. Impact: loc...