118 matches found
[security bulletin] HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01362558 Version: 1 HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted...
CVE-2008-1661
CVE-2008-1661 describes a stack-based buffer overflow in NSI DoubleTake.exe (HP StorageWorks Storage Mirroring) that allows remote code execution via a crafted encoded authentication request. Public artifacts (Metasploit module, exploit writings) confirm the vulnerability affects HP StorageWorks ...
CVE-2008-1661
creationtimestamp| type| source ---|---|--- 2008-06-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5738 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16450 2018-05-29 15:50:33+00:00| seen|...
Fedora 7 : pcre-7.3-3.fc7 (2008-1842)
This update re-based pcre to version 7.3 as used in Fedora 8 to address multiple security issues that cause memory corruption, leading to application crash or possible execution of arbitrary code. CVE-2007-1659 315871, CVE-2007-1661 392931, CVE-2007-1662 392921, CVE-2007-4766 392891, CVE-2007-476...
Debian Security Advisory DSA 1399-1 (pcre3)
The remote host is missing an update to pcre3 announced via advisory DSA 1399-1. OpenVAS Vulnerability Test $Id: deb13991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1399-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1399-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PCRE: Multiple vulnerabilities
Background PCRE is a library providing functions for Perl-compatible regular expressions. Description Tavis Ormandy Google Security discovered multiple vulnerabilities in PCRE. He reported an error when processing "\Q\E" sequences with unmatched "\E" codes that can lead to the compiled bytecode...
openSUSE 10 Security Update : pcre (pcre-4683)
Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. CVE-2007-1659, CVE-2007-1660, CVE-2007-1661,...
CVE-2007-1661
Perl-Compatible Regular Expression PCRE library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service crash, as demonstrated by the "\X?\d...
CVE-2007-1661
CVE-2007-1661 affects the Perl-Compatible Regular Expression (PCRE) library prior to 7.3, where backtracking can occur when matching certain input bytes against some patterns in non‑UTF‑8 mode, potentially exposing sensitive information or causing a denial of service (crash). The description expl...
FreeBSD : pcre -- arbitrary code execution (bfd6eef4-8c94-11dc-8c55-001c2514716c)
Debian project reports : Tavis Ormandy of the Google Security Team has discovered several security issues in PCRE, the Perl-Compatible Regular Expression library, which potentially allow attackers to execute arbitrary code by compiling specially crafted regular expressions. %NASLMINLEVEL 70300 C...
Debian DSA-1399-1 : pcre3 - several vulnerabilities
Tavis Ormandy of the Google Security Team has discovered several security issues in PCRE, the Perl-Compatible Regular Expression library, which potentially allow attackers to execute arbitrary code by compiling specially crafted regular expressions. Version 7.0 of the PCRE library featured a majo...
DSA-1399-1 pcre3 - arbitrary code execution
Bulletin has no description...
CVE-2006-1661
CVE-2006-1661 : Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script/HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action. Aff...
CVE-2005-1661
Affected software: Jeuce Personal Webserver 2.13. Vulnerability: remote attackers can cause a denial-of-service (server crash) via a long GET request, possibly triggering a buffer overflow. This is the root cause described across connected documents. Impact: DoS with server instability; no detail...
CVE-2002-1661
The CVE-2002-1661 issue affects the Leafnode NNTP server, specifically versions 1.9.20 through 1.9.29, where processing a cross-posted article to multiple groups can trigger an infinite-loop DoS. The vulnerability occurs when one target group name is a prefix of another, and the article is reques...
