118 matches found
Debian Security Advisory DSA 1469-1 (flac)
The remote host is missing an update to flac announced via advisory DSA 1469-1. OpenVAS Vulnerability Test $Id: deb14691.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1469-1 flac Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1469-1 : flac - several vulnerabilities
Sean de Regge and Greg Linares discovered multiple heap and stack based buffer overflows in FLAC, the Free Lossless Audio Codec, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2003-1469
The CVE: CVE-2003-1469 affects Macromedia ColdFusion MX. The default configuration enables Robust Exception Information, which allows remote attackers to obtain the web server’s full path via a direct request to CFIDE/probe.cfm, leaking the path in an error message. Affected component is the CFID...
CVE-2007-1469
CVE-2007-1469 describes an SQL injection in the gallery.asp component of Absolute Image Gallery 2.0. The vulnerability is triggered via the categoryid parameter in a viewimage action, allowing remote attackers to execute arbitrary SQL commands. The entry is supported by NVD and CVE records, which...
CentOS 3 / 4 : ethereal (CESA-2005:427)
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...
CVE-2006-1469
Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image...
CVE-2006-1469
CVE-2006-1469 – Apple Mac OS X 10.4 up to 10.4.6 : A stack-based buffer overflow in ImageIO can be triggered by a crafted TIFF image, allowing a remote attacker to cause a crash and potentially execute arbitrary code. Affected product: Mac OS X 10.4.x (via ImageIO). Root cause: stack-based overfl...
CVE-2005-1469
Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer...
CVE-2005-1469
The CVE-2005-1469 entry concerns Ethereal (Wireshark) GSM dissector before version 0.10.11. The vulnerability is described as an unknown issue in the GSM dissector that can cause the dissector to access an invalid pointer, potentially impacting parsing of GSM traffic. Supported details indicate t...
CVE-2001-1469
The CVE-2001-1469 entry concerns the RC4-based use in SSH1, where remote attackers can modify messages without detection by XOR’ing the original message CRC with the CRC of a mask of the modified bits. Affected component is the RC4 stream cipher implementation within SSH1; impact is partial integ...
CVE-2004-1469
The CVE-2004-1469 entry covers a format-string vulnerability in SUS (SUS 2.0.2, and other versions before 2.0.6) where a log() call passing a command line argument to syslog can be exploited by a local user to execute arbitrary code. Affected software is SUS; the underlying issue is a faulty form...
CVE-2004-1469
Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog...
CVE-2002-1469
scponly does not properly verify the path when finding the 1 scp or 2 sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs...
Macromedia ColdFusion MX CFIDE/probe.cfm Direct Request Path Disclosure
A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests port 8500 are received by the server, an error message is returned containing the full path of the ColdFusion installation. %NASLMINLEVEL...
CVE-2002-1469
scponly does not properly verify the path when finding the 1 scp or 2 sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs...
CVE-1999-1469
The vulnerability CVE-1999-1469 stems from a buffer overflow in the w3-auth CGI program within the miniSQL package. An attacker can remotely execute arbitrary commands by sending an HTTP request with a long URL or a long User-Agent header. The CVSS data indicates a network attack vector with low ...
CVE-2001-1469
The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check CRC with the CRC of a mask consisting of all the bits of the original message that were modified...