157 matches found
Fedora Update for mt-daapd FEDORA-2008-3250
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for mt-daapd FEDORA-2008-4126
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for dnssec-tools FEDORA-2008-1771
Check for the Version of dnssec-tools OpenVAS Vulnerability Test Fedora Update for dnssec-tools FEDORA-2008-1771 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
[SECURITY] [DSA-1597-2] New mt-daapd package fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1597-2 [email protected] http://www.debian.org/security/ Devin Carraway August 30, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA-1597-2] New mt-daapd package fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1597-2 [email protected] http://www.debian.org/security/ Devin Carraway August 30, 2008 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 1597-1 (mt-daapd)
The remote host is missing an update to mt-daapd announced via advisory DSA 1597-1. OpenVAS Vulnerability Test $Id: deb15971.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1597-1 mt-daapd Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
[SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1597-1 [email protected] http://www.debian.org/security/ Devin Carraway June 12, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1597-1 [email protected] http://www.debian.org/security/ Devin Carraway June 12, 2008 http://www.debian.org/security/faq -...
FreeBSD : mt-daapd -- integer overflow (86a4d810-1884-11dd-a914-0016179b2dd5)
FrSIRT reports : A vulnerability has been identified in mt-daapd which could be exploited by remote attackers to cause a denial of service or compromise an affected system. This issue is caused by a buffer overflow error in the wsgetpostvars function when processing a negative Content-Length :...
Firefly媒体服务器畸形Content-Length字段堆溢出漏洞
BUGTRAQ ID: 28860 CVECAN ID: CVE-2008-1771 Firefly是Roku SoundBridge和iTunes所使用的开源媒体服务器。 Firefly的src/webserver.c文件的wsgetpostvars函数中存在堆溢出漏洞，如果远程攻击者向服务区发送了带有负数Content-Length值的POST请求的话就可以触发这个溢出，导致拒绝服务或执行任意指令。 以下是src/webserver.c文件中的漏洞代码： 707 int wsgetpostvarsWSCONNINFO pwsc 708 char contentlength; 709...
CVE-2008-1771
Integer overflow in the wsgetpostvars function in Firefly Media Server formerly mt-daapd 0.2.4.1 0.9r1696-1.2 on Debian allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP POST request with a large Content-Length...
CVE-2008-1771
CVE-2008-1771 describes an integer overflow in ws_getpostvars in mt-daapd (Firefly Media Server) v0.2.4.1 and related builds, triggered by a large HTTP POST Content-Length. This can cause a heap buffer overflow with potential remote code execution, alongside denial of service. Connected advisorie...
SAXoPRESS pbcs.dll url Parameter Traversal Arbitrary File Access
The remote host is running SAXoPRESS or Publicus, web content management systems commonly used by newspapers. The installation of SAXoPRESS / Publicus on the remote host fails to validate user input to the 'url' parameter of the 'apps/pbcs.dll' script. An attacker can exploit this issue to access...
CVE-2006-1771
SAXoPRESS (SaxoTECH SAXoPRESS, also known as SaxoTech Online/Publicus) is affected by a directory traversal in the pbcs.dll component exposed via the url parameter. The issue arises from insufficient validation of the url input, enabling an attacker to access arbitrary files on the remote host wi...
CVE-2002-1771
FormMail 1.9 and earlier contains a newline-injection flaw in the email/realname CGI variables that allows remote attackers to inject CC/BCC/TO fields, enabling spam or anonymous email. Affected component is the FormMail mailing script; impact is remote abuse without authentication. The provided ...
CVE-2004-1771
CVE-2004-1771 affects Scalable OGo (SOGo) 1.0, where remote authenticated users can bypass intended permissions and view private appointments of other users. The provided sources confirm the affected product and the permission bypass impact, but do not specify the root cause details, vulnerable c...