Fedora Update for moodle FEDORA-2007-1445

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200408-11 (Nessus)

The remote host is missing updates announced in advisory GLSA 200408-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Microsoft Windows活动目录LDAP请求远程拒绝服务漏洞（MS08-035）

BUGTRAQ ID: 29584 CVECAN ID: CVE-2008-1445 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的活动目录组件没有正确地验证LDAP请求，如果远程攻击者向ADAM、活动目录或AD LDS服务器发送了特制的LDAP请求报文的话，就可能导致系统停止响应并自动重新启动。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2 Microsoft...

Securify bulletin: Microsoft Active Directory Denial-of-service

SECURIFY Bulletin: Active Directory Denial-of-service ===================================================== I. SUMMARY: SECURIFY has discovered a denial-of-service vulnerability in Microsoft Active Directory AD in which a domain user sending a specially-crafted LDAP request causes the Active...

CVE-2008-1445

CVE-2008-1445 corresponds to a denial-of-service vulnerability in Active Directory affecting Windows 2000 Server SP4, Windows XP Professional SP2/SP3, Windows Server 2003 SP1/SP2, and Windows Server 2008. The issue arises from insufficient validation of specially crafted LDAP requests, allowing r...

MS08-035: Vulnerability in Active Directory Could Allow Denial of Service (953235)

The remote version of Active Directory contains a denial of service vulnerability when processing LDAP requests. An attacker can exploit this flaw to crash the remote Active Directory server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33138; scriptversion"1.31";...

Microsoft Active Directory LDAP Request Denial of Service (MS08-035; CVE-2008-1445)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Application Mode ADAM is a Lightweight Directory Access Protocol LDAP directory service that runs as a user service.A denial of service vulnerability has been reported in...

Debian Security Advisory DSA 1445-1 (maradns)

The remote host is missing an update to maradns announced via advisory DSA 1445-1. OpenVAS Vulnerability Test $Id: deb14451.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1445-1 maradns Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1445-1 : maradns - programming error

Michael Krieger and Sam Trenholme discovered a programming error in MaraDNS, a simple security-aware Domain Name Service server, which might lead to denial of service through malformed DNS packets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

CVE-2003-1445

Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service crash and possibly execute arbitrary code via a long pathname...

CVE-2003-1445

CVE-2003-1445 describes a stack-based buffer overflow in Far Manager. Affected: Far Manager versions 1.70beta4 and earlier (per CVE data, 1.70beta1 and earlier are vulnerable). The vulnerability allows a local user to crash the application and may permit arbitrary code execution via a long pathna...

CVE-2007-1445

CVE-2007-1445 affects BP Blog 7.0–7.0.2. The vulnerability is in the heme preview feature of default.asp, where an attacker can inject SQL through the layout parameter, enabling arbitrary SQL commands on the backend. The CVSS-derived context from the NVD indicates a network-accessible, low-attack...

CVE-2006-1445

CVE-2006-1445 affects Apple Mac OS X 10.3.9 and 10.4.6, where a buffer overflow in the FTPServer (FTP server path name handling) could allow a remote authenticated user to execute arbitrary code. The issue is addressed by Security Update 2006-003, which fixes FTPServer (tnftpd) boundary handling ...

Mac OS X Multiple Vulnerabilities (Security Update 2006-003)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...

CVE-2005-1445

CVE-2005-1445 affects SitePanel 2.6.1 and earlier (SitePanel2). The issue is multiple directory traversal vulnerabilities allowing remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, and (2) read arbitrary files via the lang parameter to index.php. R...

CVE-2001-1445

The CVE-2001-1445 entry relates to Lotus Domino's SMTP server versions 5.0–5.7, where remote attackers could bypass mail relaying restrictions by crafting RCPT TO commands. The available sources describe the vulnerability as an unknown issue with relaying control, without detailing the root cause...

CVE-2004-1445

CVE-2004-1445 describes a race condition in Nessus’ nessus-adduser utility. If TMPDIR is not set, a local user can potentially escalate privileges. This affects Nessus 2.0.11 and possibly earlier versions. The vulnerability is documented with a CVSSv2 base score of 3.7 (Low), local attack vector,...

CVE-2004-1445

A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges...

CVE-2003-1445

Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service crash and possibly execute arbitrary code via a long pathname...

CVE-2002-1445

Cross-site scripting XSS vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page...