163 matches found
Debian Security Advisory DSA 1741-1 (psi)
The remote host is missing an update to psi announced via advisory DSA 1741-1. OpenVAS Vulnerability Test $Id: deb17411.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1741-1 psi Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Gentoo Security Advisory GLSA 200605-09 (mozilla-thunderbird)
The remote host is missing updates announced in advisory GLSA 200605-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200605-09 (mozilla-thunderbird)
The remote host is missing updates announced in advisory GLSA 200605-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Cisco Unified Presence引擎多个拒绝服务漏洞
BUGTRAQ ID: 29222,29220,29219 CVECAN ID: CVE-2008-1741,CVE-2008-1740,CVE-2008-1158 Cisco Unified Presence用于收集有关用户可用性状态和通讯能力的信息。 当有漏洞的Cisco Unified Presence系统接收到一系列畸形报文时,Cisco Unified Presence 1.0版本的的Presence引擎服务中会出现两个漏洞,导致拒绝服务的情况。第一个漏洞记录为CVE-2008-1158和Cisco Bug ID...
CVE-2008-1741
CVE-2008-1741 affects Cisco Unified Presence SIP Proxy (SIPD) in Cisco Unified Presence versions 6.0(1) and 6.0(2). The vulnerability allows remote attackers to cause a denial of service (core dump and service interruption) by sending a TCP port scan to the SIP proxy, as described in Cisco Bug CS...
CVE-2007-1741
Multiple race conditions in suexec in Apache HTTP Server httpd 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that th...
DEBIAN-CVE-2007-1741
Multiple race conditions in suexec in Apache HTTP Server httpd 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that th...
CVE-2007-1741
Multiple race conditions in suexec in Apache HTTP Server httpd 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that th...
CVE-2007-1741
CVE-2007-1741 affects Apache HTTP Server (httpd) and its suexec module (v2.2.3). The issue comprises multiple race conditions between directory/file validation and their usage in suexec, enabling local users to gain privileges and execute arbitrary code by renaming directories or performing symli...
Fedora Core 5 : thunderbird-1.5.0.2-1.1.fc5 (2006-490)
Updated thunderbird packages that fix various bugs are now available for Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several bugs were found in the way Thunderbird...
Solaris 8 (x86) : 120672-08
Mozilla 1.7x86 for Solaris 8 and 9. Date this patch was last updated by Sun : Sep/02/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Ubuntu 4.10 / 5.04 / 5.10 : mozilla vulnerabilities (USN-275-1)
Web pages with extremely long titles caused subsequent launches of Mozilla browser to hang for up to a few minutes, or caused Mozilla to crash on computers with insufficient memory. CVE-2005-4134 Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables...
RHEL 4 : thunderbird (RHSA-2006:0330)
Updated thunderbird packages that fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issu...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include CVE-2006-0748, an issue fixed by these erratum packages...
CVE-2006-1741
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by 1 "using a modal alert to suspend an event handler while a new page is being loaded", 2 using eval, and using...
CVE-2006-1741
CVE-2006-1741 affects Mozilla Firefox (1.x up to 1.5, and 1.0.x up to 1.0.8), Mozilla Suite up to 1.7.13, and SeaMonkey up to 1.0, enabling remote attackers to inject arbitrary JavaScript into other sites. The root causes involve (1) using a modal alert to suspend an event handler during page loa...
Music Daemon Denial of Service
It is possible to cause the Music Daemon to stop responding to requests by causing it to load the /dev/random filename as its track list. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
CVE-2005-1741
Technical details about CVE-2005-1741 are not publicly available in the provided documents. No specifics on affected components, versions, root cause, or exploit information are included here; monitor for official disclosures.
CVE-2004-1741
Music daemon musicd 0.0.3 and earlier allows remote attackers to cause a denial of service crash by calling LOAD with a binary file as an argument, then calling SHOWLIST...
CVE-2004-1741
CVE-2004-1741 affects Music Daemon (musicd) up to version 0.0.3. The vulnerability allows remote attackers to crash the server by calling LOAD with a binary file as the argument and then calling SHOWLIST. OpenVAS confirms a DoS condition where loading the /dev/random filename as the track list ca...