TCP Window Size Enforcement (CVE-2008-4609; CVE-2009-1925; CVE-2009-1926)

TCP/IP is a set of networking protocols that are widely used on the Internet. TCP/IP provides communications across interconnected networks of computers that have diverse hardware architectures and that run various operating systems. Multiple vulnerabilities exist in TCP/IP processing in Microsof...

CVE-2008-1925

CVE-2008-1925 affects InspIRCd up to version 1.1.18, via the namesx and uhnames modules. A buffer overflow caused by unvalidated network input can be triggered by many channel users with crafted nicknames/idents/hostnames, enabling a remote DoS (daemon crash). The Gentoo/G scan advisories recomme...

CVE-2007-1925

The CVE-2007-1925 entry affects Tru-Zone Nuke ET 3.4 before fix 7, where the borrado function in modules/Your_Account/index.php does not verify that account deletion requests originate from the account owner. This allows remote authenticated users to delete arbitrary accounts by modifying cookies...

CVE-2005-1925

CVE-2005-1925 concerns multiple directory traversal vulnerabilities in TikiWiki before 1.9.1. The issues reside in tiki-editpage.php (suck_url) and tiki-user_preferences.php (language) where user-controlled input is read as file paths without proper sanitization, enabling reading arbitrary files ...

[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-user_preferences Command Injection Vulnerability

Tikiwiki tiki-userpreferences Command Injection Vulnerability iDEFENSE Security Advisory 11.10.05 www.idefense.com/application/poi/display?id=335&type=vulnerabilities November 10, 2005 I. BACKGROUND Tikiwiki Community Portal is a full featured, freely available, Wiki/CMS/Groupware system written ...

CVE-2002-1925

CVE-2002-1925 affects Tiny Personal Firewall versions 3.0 through 3.0.6. The vulnerability arises when an administrator views the Log tab in the Personal Firewall Agent module, enabling remote attackers to cause a denial of service (crash) by sending SYN, UDP, ICMP, or TCP port scans. The availab...

CVE-2004-1925

CVE-2004-1925 affects Tiki Wiki CMS Groupware (TikiWiki)