Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : curl vulnerability (USN-1801-1)

YAMADA Yasuharu discovered that libcurl was vulnerable to a cookie leak when doing requests across domains with matching tails. curl did not properly restrict cookies to domains and subdomains. If a user or automated system were tricked into processing a specially crafted URL, an attacker could...

CVE-2013-1801

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for YAML type...

CVE-2013-1801

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for YAML type...

CVE-2013-1801

Technical details for CVE-2013-1801 are not publicly available in the provided documents. No vendor/product/version specifics or remediation are disclosed here. Monitor for updates from official sources to obtain concrete details and fixes.

Scientific Linux Security Update : rdesktop on SL5.x i386/x86_64

An integer underflow and integer signedness issue were discovered in the rdesktop. If an attacker could convince a victim to connect to a malicious RDP server, the attacker could cause the victim's rdesktop to crash or, possibly, execute an arbitrary code. CVE-2008-1801, CVE-2008-1803 %NASLMINLEV...

CentOS Update for qemu-img CESA-2011:1801 centos6

Check for the Version of qemu-img OpenVAS Vulnerability Test CentOS Update for qemu-img CESA-2011:1801 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2012-1801

CVE-2012-1801 concerns multiple stack-based buffer overflows in ABB WebWare Server components (COM and ActiveX controls) across ABB products including WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite. The root cause is improper input v...

CVE-2011-1801

CVE-2011-1801 affects Google Chrome prior to version 11.0.696.71. The vulnerability is described as unspecified and allows remote attackers to bypass the browser’s pop-up blocker via unknown vectors. Several connected sources confirm Chrome versions before 11.0.696.71 are impacted; some entries r...

Apple CoreGraphics (Preview) Memory Corruption Vulnerability - CVE-2010-1801

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Apple CoreGraphics Preview Memory Corruption when parsing PDF files...

CVE-2010-1801

Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF file...

CVE-2010-1801

Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF file...

CVE-2010-1801

CVE-2010-1801 describes a heap-based buffer overflow in Apple CoreGraphics on Mac OS X 10.5.8 and 10.6.4 triggered by parsing crafted PDF files, causing remote code execution or a denial of service (application crash). The vulnerability affects the CoreGraphics PDF processing path (Preview(app) a...

CVE-2009-1801

Multiple cross-site scripting XSS vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to inject arbitrary web script or HTML via the 1 display parameter to reports.php, the 2 order and 3 extdisplay parameters to config.php, and the 4 so...

CVE-2009-1801

The CVE-2009-1801 entry describes multiple XSS vulnerabilities in FreePBX releases: 2.5.1 and other 2.4.x, 2.5.x, and pre-release 2.6.x. The flaws allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) display in reports.php, (2) order and (3) extdisplay in con...

Debian: Security Advisory (DSA-1801-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1801-1 : ntp - buffer overflows

Several remote vulnerabilities have been discovered in NTP, the Network Time Protocol reference implementation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0159 A buffer overflow in ntpq allow a remote NTP server to create a denial of service...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : rdesktop vulnerabilities (USN-646-1)

It was discovered that rdesktop did not properly validate the length of packet headers when processing RDP requests. If a user were tricked into connecting to a malicious server, an attacker could cause a denial of service or possible execute arbitrary code with the privileges of the user...

RedHat Update for rdesktop RHSA-2008:0725-01

Check for the Version of rdesktop OpenVAS Vulnerability Test RedHat Update for rdesktop RHSA-2008:0725-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for rdesktop FEDORA-2008-3985

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rdesktop FEDORA-2008-3985

Check for the Version of rdesktop OpenVAS Vulnerability Test Fedora Update for rdesktop FEDORA-2008-3985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...