Important: Red Hat Security Advisory: krb5 security and bug fix update

Updated krb5 packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2005-1323

creationtimestamp| type| source ---|---|--- 2010-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16735 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/nettermnetftpduser.rb 2025-02-06 03:13:38+00:00| see...

NetTerm NetFTPD USER Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'NetTerm...

CVE-2009-1323

CVE-2009-1323 describes an SQL injection in Web File Explorer 3.1, where body.asp fails to sanitize the id parameter, allowing remote attackers to inject and execute arbitrary SQL commands. This is triggered via the id parameter in the request, enabling potential data disclosure or modification o...

CVE-2009-1323

creationtimestamp| type| source ---|---|--- 2009-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8382...

CVE-2008-1323

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...

CVE-2008-1323

The CVE-2008-1323 entry documents a CSRF vulnerability in WoltLab Burning Board Lite (wBB) 2 Beta 1, where index.php’s ThreadDelete action can be abused by an attacker to delete threads as other users. This is triggered via forged requests, enabling unauthorized modification of data (thread delet...

Debian Security Advisory DSA 1284-1 (qemu)

The remote host is missing an update to qemu announced via advisory DSA 1284-1. OpenVAS Vulnerability Test $Id: deb12841.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1284-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1323-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOL8072 - Obtaining uptime information from TCP timestamps

Timestamps are a TCP option used by a TCP/IP networking stack to implement two algorithms: the Round-Trip Time Measurement RTTM algorithm and the Protection Against Wrapped Sequence Numbers PAWS algorithm. Both algorithms are defined in RFC 1323, and are widely implemented by most modern operatin...

CVE-2007-1323

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2893. Reason: this candidate was intended for one issue, but some sources used this identifier for a separate issue, and a duplicate identifier had also been created by the time dual use was detected. Notes: All CVE users...

CVE-2007-1323

CVE-2007-1323 is rejected/not used per the initial description.

Debian DSA-1323-1 : krb5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the MIT reference implementation of the Kerberos network authentication protocol suite, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2442 We...

Debian DSA-1284-1 : qemu - several vulnerabilities

Several vulnerabilities have been discovered in the QEMU processor emulator, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1320 Tavis Ormandy discovered that a memory manageme...

FreeBSD : qemu -- several vulnerabilities (0ac89b39-f829-11db-b55c-000e0c6d38a9)

The Debian Security Team reports : Several vulnerabilities have been discovered in the QEMU processor emulator, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2007-1320Tavis Ormandy...

DSA-1284-1 qemu

Bulletin has no description...

CVE-2003-1323

Elm ME+ 2.4 before PL109S is affected. When installed with setgid mail and on systems lacking POSIX saved ID support, local users can read and modify certain files with the privileges of the mail group via unspecified vectors. The Red Hat advisory corroborates the version and condition but does n...

CVE-2006-1323

CVE-2006-1323 affects WinHKI 1.6 and earlier. The vulnerability is a directory traversal in archive handling where a file name containing ".." inside RAR, TAR, ZIP, or TAR.GZ archives can allow a user-assisted attacker to overwrite arbitrary files on the system. The root cause is improper validat...

NetTerm NetFTPD USER Buffer Overflow

This module exploits a vulnerability in the NetTerm NetFTPD application. This package is part of the NetTerm package. This module uses the USER command to trigger the overflow. This module requires Metasploit: https://metasploit.com/download Current source:...

TCP TIMESTAMPS Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================== TCP TIMESTAMPS Denial of Service Exploit ======================================== / TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323...