CentOS 3 : tcpdump (CESA-2005:421)

Updated tcpdump packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. These updated packages also add support for output files larger than 2 GB, add support for some new VLAN IDs, and fix...

CVE-2006-1280

CGI::Session 4.03-1 does not set proper permissions on temporary files created in 1 Driver::File and 2 Driver::dbfile, which allows local users to obtain privileged information, such as session keys, by viewing the files...

DEBIAN-CVE-2006-1280

CGI::Session 4.03-1 does not set proper permissions on temporary files created in 1 Driver::File and 2 Driver::dbfile, which allows local users to obtain privileged information, such as session keys, by viewing the files...

CVE-2006-1280

CGI::Session 4.03-1 is affected by improper permissions on temporary files created by Driver::File and Driver::db_file, enabling local users to view files containing privileged data such as session keys. This is the core issue described in CVE-2006-1280 across sources (NVD/NVD mirrors and OSV-lik...

CVE-2003-1280

CVE-2003-1280: A directory traversal flaw in cgihtml 1.69 enables remote attackers to overwrite or create arbitrary files via .. in multipart/form-data uploads. Connected Red Hat/CVE records reiterate the same vulnerability details. The available documents do not provide a remediation or patch ve...

Fedora Core 3 : tcpdump-3.8.2-8.FC3 (2005-351)

Fri Apr 29 2005 Martin Stransky - 14:3.8.2-8.FC3 - fix for CVE-2005-1280 Multiple DoS issues in tcpdump CVE-2005-1279 CVE-2005-1278, 156040 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

SOL4809 - tcpdump vulnerabilities - CAN-2005-1278, CAN-2005-1279, and CAN-2005-1280

F5 Networks Product Development tracked this issue as CR48152 and CR48153 and it was fixed in BIG-IP and 3-DNS version 4.5.13. This issue still exists in the BIG-IP and 3-DNS 4.6 software branch...

RHEL 4 : tcpdump (RHSA-2005:417)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:417 advisory. Tcpdump is a command-line tool for monitoring network traffic. Several denial of service bugs were found in the way tcpdump processes certain...

CVE-2005-1280

CVE-2005-1280 affects tcpdump 3.9.1 and earlier, where the rsvp_print function can enter an infinite loop when handling a crafted RSVP packet of length 4, causing a denial of service. The vulnerability is publicly documented across multiple sources (e.g., Red Hat/CentOS advisories RHSA-2005-417 a...

CVE-2004-1280

The guipopupviewfly function in guitviewpopup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2004-1280

The guipopupviewfly function in guitviewpopup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2004-1280

CVE-2004-1280 affects junkie 0.3.1. The vulnerable code is gui_popup_view_fly in gui_tview_popup.c, which allows remote FTP servers to execute arbitrary commands via shell metacharacters in a filename, enabling command execution on the host. The documents do not provide a remediation or patch det...

Solaris in.fingerd Crafted Request Information Disclosure

Binary data 1280.prm...

CVE-2003-1280

Directory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create arbitrary files via a .. dot dot in multipart/form-data uploads...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-1999-1280

In CVE-1999-1280, Hummingbird Exceed 6.0.1.0 includes a development/testing DLL that logs user names and passwords in cleartext in the test.log file. The issue affects the DLL usage within Exceed; the precise vulnerable surface is the development/testing DLL component. Documented impact indicates...