104 matches found
[SECURITY] [DSA 2643-1] puppet security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2643-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 12, 2013 http://www.debian.org/security/faq -...
CVE-2012-1640
The Drupal Managesite module (6.x-1.x) is affected by XSS in the title field when adding or updating a category, exploitable by remote-authenticated users with the admin’s managesite permission. Affected versions are prior to 6.x-1.1; upgrade to Managesite 6.x-1.1 to remediate. The issue is mitig...
SA-CONTRIB-2012-015 - Managesite - Cross Site Scripting (XSS)
CVE: CVE-2012-1640 This module provides a way to build a control panel similar to the one provided by Drupal 7 on the admin zone /admin. The module doesn't sufficiently filter user supplied text in the administration settings. This vulnerability is mitigated by the fact that an attacker must have...
CVE-2011-1640
The CVE-2011-1640 entry concerns Cisco IOS 12.2 prior to 12.2(33)SXJ1, where the ethernet-lldp component improperly handles a large number of LLDP Management Address TLVs. This can allow a remote attacker to cause a denial of service (device crash) by sending crafted LLDPDUs. Affected product/ver...
Gentoo Security Advisory GLSA 201009-06 (clamav)
The remote host is missing updates announced in advisory GLSA 201009-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
SuSE 11 / 11.1 Security Update : clamav (SAT Patch Numbers 2479 / 2480)
This update fixes the following security issues in clamav that can be used as a remote denial of service attack : - A off-by-one buffer overflow. CVE-2010-1640 - A crash while parsing PDFs CVE-2010-1639 / CVE-2010-2077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
SuSE 10 Security Update : clamav (ZYPP Patch Number 7056)
This update fixes the following security issues in clamav that can be used as a remote denial of service attack : - An off-by-one buffer overflow. CVE-2010-1640 - A crash while parsing PDFs CVE-2010-1639 / CVE-2010-2077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...
openSUSE Security Update : clamav (openSUSE-SU-2010:0414-1)
This update fixes a off-by-one buffer overflow CVE-2010-1640 and a crash while parsing PDFs CVE-2010-1639, CVE-2010-2077 in clamav that can be used as a remote denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
openSUSE Security Update : clamav (openSUSE-SU-2010:0414-1)
This update fixes a off-by-one buffer overflow CVE-2010-1640 and a crash while parsing PDFs CVE-2010-1639, CVE-2010-2077 in clamav that can be used as a remote denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
CVE-2010-2077
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1640. Reason: This candidate is a duplicate of CVE-2010-1640. Notes: All CVE users should reference CVE-2010-1640 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2010-1640
Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...
CVE-2010-1640
CVE-2010-1640 is an off-by-one/read out-of-bounds vulnerability in ClamAV 0.96 (parseicon in libclamav/pe_icons.c) that can cause a remote denial of service via a crafted PE icon. Connected advisories and public feeds corroborate the issue as a remote DoS, tied to improper rounding during scaling...
CVE-2010-1640
Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1640. Reason: This candidate is a duplicate of CVE-2010-1640. Notes: All CVE users should reference CVE-2010-1640 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
ClamAV < 0.96.1 DoS Vulnerability - Linux
ClamAV is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav";...
CVE-2009-1640
CVE-2009-1640 affects Nucleus Data Recovery Kernel Recovery for Macintosh v4.04. The vulnerability is a stack-based buffer overflow in the AMHH file handling that can allow a user‑assisted attacker to execute arbitrary code. The NVD entry shows a high base score (9.3, CVSS2: AV:N/AC:M/Au:N/C:C/I:...
Debian DSA-1640-1 : python-django - several vulnerabilities
Simon Willison discovered that in Django, a Python web framework, the feature to retain HTTP POST data during user reauthentication allowed a remote attacker to perform unauthorized modification of data through cross site request forgery. This is possible regardless of the Django plugin to preven...
CVE-2008-1640
SQL injection vulnerability in jgstreffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the viewid parameter in an ansicht action...
CVE-2008-1640
CVE-2008-1640 affects the Woltlab Burning Board addon “JGS-XA JGS-Treffen” (version 2.0.2 and earlier). The vulnerability is in the file jgs_treffen.php and is triggered via the view_id parameter in an ansicht action, enabling remote attackers to execute arbitrary SQL commands (SQL injection). Th...
