Debian Security Advisory DSA 254-1 (traceroute-nanog)

The remote host is missing an update to traceroute-nanog announced via advisory DSA 254-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-1387-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1387

CVE-2003-1387 : A buffer overflow in Opera 6.05 and 6.06 (and possibly other versions) can be triggered by a URL containing a long username, allowing a remote attacker to potentially execute arbitrary code. The connected NVD entry confirms the vulnerability details but does not specify a patch ve...

Debian DSA-1387-1 : librpcsecgss - buffer overflow

It has been discovered that the original patch for a buffer overflow in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 CVE-2007-3999, DSA-1368-1 was insufficient to protect from arbitrary code execution in some environments. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2007-1387

The DirectShow loader loader/dshow/DSVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than...

CVE-2007-1387

The CVE-2007-1387 entry concerns the DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, used by xine-lib. The root cause is failure to set biSize before memcpy, which can cause a buffer overflow and potentially allow remote code execution. The provided documents do ...

CVE-2007-1387

The DirectShow loader loader/dshow/DSVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than...

CVE-2006-1387

CVE-2006-1387 affects TWiki 4.0, 4.0.1, and 20010901 through 20040904. The vulnerability allows remote authenticated users with edit rights to cause a denial of service via INCLUDE by URL statements that form a loop (e.g., a page including itself), triggering infinite recursion and consuming CPU ...

CVE-2005-1387

CVE-2005-1387 affects Cocktail 3.5.4 and possibly earlier on Mac OS X. The root cause is that the administrative password is passed on the command line to sudo in cleartext, allowing local users to reveal the password by inspecting running processes. This can lead to sensitive information exposur...

CVE-2004-1387

The CVE-2004-1387 entry concerns the apache-utils package, specifically the check_forensic script (version 1.3.31). The vulnerability allows a local user to overwrite or create arbitrary files via a symlink attack on temporary files, with the underlying root cause being improper handling of tempo...

CVE-2003-1387

Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username...

CVE-2002-1387

CVE-2002-1387 affects traceroute-nanog: the spray mode may allow local users to overwrite arbitrary memory locations via an array index overflow when using the nprobes argument. The CVSS/NVD entry indicates local access, low attack complexity, and partial impact to confidentiality, integrity, and...

CVE-2001-1387

The CVE-2001-1387 entry concerns the iptables package, specifically iptables-save in versions before 1.2.4. The issue is that iptables-save records the --reject-with icmp-host-prohibited rule as --reject-with tcp-reset, causing generated responses to diverge from the administrator’s configuration...

CVE-2001-1387

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak...

CVE-1999-1387

Windows NT 4.0 SP2 allows remote attackers to cause a denial of service crash, possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25...