[SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2068-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 11, 2010 http://www.debian.org/security/faq -...

Debian DSA-2068-1 : python-cjson - buffer overflow

Matt Giuca discovered a buffer overflow in python-cjson, a fast JSON encoder/decoder for Python. This allows a remote attacker to cause a denial of service application crash through a specially crafted Python script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2068-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 11, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2068-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 11, 2010 http://www.debian.org/security/faq -...

Python-cjson Unicode字符编码缓冲区溢出漏洞

BUGTRAQ ID: 41279 CVE ID: CVE-2010-1666 python-cjson是Python使用的快速JSON编码/解码器模块。 在启用了UCS-4编码的情况下，远程攻击者可以通过向python-cjson模块的cjson.encode函数提交超长的Unicode输入触发缓冲区溢出，导致拒绝服务或完全入侵使用该模块的应用所在系统。 Dan Pascu python-cjson 1.0.5 厂商补丁： Dan Pascu --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2010-1666

CVE-2010-1666 affects python-cjson 1.0.5 with UCS-4 encoding enabled. A buffer overflow in cjson.encode may allow a context-dependent attacker to trigger a denial of service (crash) or potentially other impact via crafted Unicode input. Public-visibility details in connected docs include: Fedora ...

CVE-2009-1666

CVE-2009-1666 affects CycloMedia CycloScopeLite 2.50.3.0. Vulnerable components are CM_ADOConnection.dll, CM_AddressInfoDBC.dll, and CM_RecordingLocationDBC.dll, with the root issue described as improper dereferencing in ReturnConnection. The description notes potential remote code execution by a...

Debian Security Advisory DSA 1666-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 1666-1. OpenVAS Vulnerability Test $Id: deb16661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1666-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1666-1 : libxml2 - several vulnerabilities

Several vulnerabilities have been discovered in the GNOME XML library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4225 Drew Yao discovered that missing input sanitising in the xmlBufferResize function may lead to an infinite loop, resulting in...

CVE-2008-1666

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2005-1666

creationtimestamp| type| source ---|---|--- 2008-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25629...

CVE-2007-1666

CVE-2007-1666 affects DataRescue IDA Pro 5.0 and 5.1. The processor_request function in the debugger server does not verify authentication before calling perform_request, enabling remote attackers to perform unauthorized actions. This is the stated root cause and directly impacts remote debugging...

CVE-2006-1666

CVE-2006-1666 describes a SQL injection vulnerability in the forum.php component of Arab Portal 2.0.1 stable. The issue allows remote attackers to inject and execute arbitrary SQL commands through the mineID parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH), with network attack ve...

CVE-2002-1666

CVE-2002-1666 affects Oracle E-Business Suite 11i.1–11i.6. The issue allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL. The root cause is not detailed in the provided documents; exploitation status and remediation are not specified.

CVE-2005-1666

Multiple buffer overflow vulnerabilities in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to crash the server and possibly execute arbitrary code by sending long arguments to FTP commands (MKD, RMD, DELE) or a long SSI command; triggers occur in ftp_xlate_path, ftp_is_canonical, ...

CVE-2004-1666

CVE-2004-1666 describes a buffer overflow in the MSN module of Trillian 0.74i. A long string ending in a newline, processed by the MSN component, can be exploited by a remote MSN server to execute arbitrary code on a vulnerable client. The vulnerability is triggered via the MSN protocol handling ...