FreeBSD Ports: gnutls

The remote host is missing an update to the system as announced in the referenced advisory. VID b31a1088-460f-11de-a11a-0022156e8794 OpenVAS Vulnerability Test $ Description: Auto generated from VID b31a1088-460f-11de-a11a-0022156e8794 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: gnutls

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-1415

CVE-2009-1415 affects GnuTLS up to version 2.6.5 (fixed in 2.6.6). The flaw resides in lib/pk-libgcrypt.c within libgnutls, which mishandles invalid DSA signatures. A malformed DSA key can trigger a denial of service (application crash) and may cause additional impact, including a free of an unin...

Security fix for the ALT Linux 9 package gnutls30 version 2.6.6-alt1

April 30, 2009 Afanasov Dmitry 2.6.6-alt1 - 2.6.6 release. + fix Corrected double free on signature verification failure CVE-2009-1415 + fix DSA key generation CVE-2009-1416 + fix gnutls-cli expiration/activation time check CVE-2009-1417 - release fixes 19873 also...

Security fix for the ALT Linux 10 package gnutls30 version 2.6.6-alt1

April 30, 2009 Afanasov Dmitry 2.6.6-alt1 - 2.6.6 release. + fix Corrected double free on signature verification failure CVE-2009-1415 + fix DSA key generation CVE-2009-1416 + fix gnutls-cli expiration/activation time check CVE-2009-1417 - release fixes 19873 also...

CVE-2008-1415

creationtimestamp| type| source ---|---|--- 2008-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5262...

Debian DSA-1415-1 : tk8.4 - buffer overflow

It was discovered that Tk, a cross-platform graphical toolkit for Tcl, performs insufficient input validation in the code used to load GIF images, which may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

CVE-2003-1415

NetCharts XBRL Server 4.0.0 is affected by a vulnerability allowing remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encoding specification. The connected documents confirm the affected product/version and the information-leak impact but do not...

CVE-2007-1415

CVE-2007-1415 describes multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier. The flaws allow an attacker to cause arbitrary PHP code execution by supplying crafted values to various parameters that influence file paths, including class_path, base_path, include_pa...

CVE-2006-1415

CVE-2006-1415 affects dotNetBB 2.42EC SP 3 and earlier. The vulnerability is a cross-site scripting (XSS) in iforget.aspx, exploitable via the em parameter, allowing remote attackers to inject arbitrary web script/HTML. Exploitation details are not provided in the connected documents; no explicit...

GlobalSCAPE Secure FTP Server Input Overflow

This module exploits a buffer overflow in the GlobalSCAPE Secure FTP Server. All versions prior to 3.0.3 are affected by this flaw. A valid user account or anonymous access is required for this exploit to work. This module requires Metasploit: https://metasploit.com/download Current source:...

GlobalSCAPE Secure FTP Server User Input Overflow

The remote host is running GlobalSCAPE Secure FTP Server. GlobalSCAPE Secure FTP Server 3.0.2 and prior versions are affected by a buffer overflow due to mishandling the user-supplied input. An attacker would first need to authenticate to the server before they can execute arbitrary commands...

CVE-2005-1415

GlobalSCAPE Secure FTP Server (3.0.2 and earlier) is affected by a buffer overflow caused by mishandling user-supplied input, allowing remote code execution after sending a long FTP command. Some sources note that all versions prior to 3.0.3 are vulnerable; exploitation requires a valid user acco...

CVE-2001-1415

The CVE-2001-1415 entry concerns OpenBSD’s vi.recover utility, with OpenBSD before 3.1 vulnerable to local users removing arbitrary zero-byte files (e.g., device nodes). The issue is local, with a low attack complexity and no authentication required, yielding partial impacts to confidentiality, i...

CVE-2001-1415

vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes...

CVE-2004-1415

CVE-2004-1415 – 2BGal SQL Injection affects 2BGal photo gallery (versions 2.4 and 2.5.1) via the PHP script modules, notably disp_album.php (and possibly disp_img.php). The root cause is failure to sanitize the id_album parameter, allowing remote attackers to inject arbitrary SQL commands. Conseq...

CVE-2004-1415

SQL injection vulnerability in 1 dispalbum.php and possibly 2 dispimg.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute arbitrary SQL commands via the idalbum parameter...

CVE-2002-1415

CVE-2002-1415 describes a format-string vulnerability in the SMTP service of WebEasyMail 3.4.2.2 and earlier. The flaw allows remote attackers to crash the service and potentially execute arbitrary code by sending crafted format strings in SMTP requests. The accessible impact via the NVD entry is...

CVE-1999-1415

CVE-1999-1415 is a local privilege escalation affecting DEC ULTRIX before 4.2 via /usr/bin/mail. The available documents confirm the vulnerable component and impact (local privilege gain) but do not provide exploit details or a remediation/patch version.