Debian: Security Advisory (DSA-1369-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1369

The vulnerability is a buffer overflow in the ByteCatcher FTP client version 1.04b , exploitable by sending a long FTP server banner. This can cause a denial of service (crash) and, per the CVE description, may allow arbitrary code execution . No exploit details, affected products, versions beyon...

CVE-2007-1369

CVE-2007-1369 affects Zend Platform 2.2.3 and earlier. The vulnerability is caused by ini_modifier (sgid-zendtech) that lets local users modify the system php.ini by editing a copy via -f and then performing a symlink attack, linking the attacker-controlled php.ini directory to /usr/local/Zend/et...

Solaris 9 (sparc) : 118829-04

Sun Management Center 3.5.1: Solaris 9 Oracle Patch. Date this patch was last updated by Sun : Jun/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

CVE-2006-1369

The CVE-2006-1369 issue affects Invision Power Board (IPB) 2.1.5 and earlier, prior to 20060308. The vulnerability is a cross-site scripting (XSS) flaw exploitable through a Private Message (PM) under certain circumstances, enabling remote attackers to inject arbitrary web script or HTML. The roo...

Fedora Core 3 : kernel-2.6.11-1.27_FC3 (2005-392)

Tue May 17 2005 Dave Jones - Remove the unused and outdated Xen patches from the FC3 tree. - Mon May 16 2005 Dave Jones - Rebase to 2.6.11.10, fixing CVE-2005-1264 - Thu May 12 2005 Dave Jones - Rebase to 2.6.11.9, fixing CVE-2005-1263 - Tue May 10 2005 Dave Jones - Fix two bugs in x86-64 page...

CVE-2005-1369

CVE-2005-1369 affects the it87 and via686a I2C drivers; prior to fixes in 2.6.11.8 and 2.6.12-rc2, these drivers created a writable sysfs file alarms, enabling a local attacker to cause CPU DoS by writing to it. Connected advisories indicate the issue is resolved by upgrading the kernel to a vers...

CVE-2004-1369

CVE-2004-1369 concerns the TNS Listener in Oracle 10g. The vulnerability allows remote attackers to cause a denial of service (listener crash) by sending a malformed service_register_NSGR request, where a value is used as an invalid offset for a pointer that references incorrect memory. The prima...

CVE-2004-1369

The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service listener crash via a malformed serviceregisterNSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory...

CVE-2002-1369

CVE-2002-1369 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17, where an unsafe use of strncat while processing the options string enables a remote attacker to cause a buffer overflow and execute arbitrary code. OpenVAS and Debian security advisories (DSA-232-1/232-2) corroborate this fam...

CVE-2004-1369

The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service listener crash via a malformed serviceregisterNSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory...

CVE-2001-1369

The CVE-2001-1369 issue affects pam-pgsql prior to 0.5.2. It allows remote attackers to bypass authentication or modify user records by injecting SQL into the user or password fields, thereby executing arbitrary SQL. Root cause is SQL injection in authentication-related input. The provided docume...

CVE-1999-1369

Real Media RealServer (rmserver) version 6.0.3.353 stores the password in plaintext in world-readable rmserver.cfg, enabling local privilege escalation. The vulnerability arises from a plaintext password in a configuration file that is world-readable, which allows local users to obtain credential...

CVE-2001-1369

Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields...