110 matches found
Microsoft Windows TCP/IP时间戳远程代码执行漏洞（MS09-048）
BUGTRAQ ID: 36265 CVECAN ID: CVE-2009-1925 Microsoft Windows是微软发布的非常流行的操作系统。 由于TCP/IP栈没有正确地清除状态信息，导致Windows TCP/IP栈中存在远程代码执行漏洞。这会导致TCP/IP栈引用包含有其他信息的字段为函数指针。匿名攻击者可以通过向在网络上监听服务的计算机发送特制的TCP/IP报文来利用这个漏洞，成功利用这个漏洞的攻击者可以完全控制受影响的系统；攻击者之后可以安装程序、查看、更改或删除数据，或创建拥有完全用户权限的新账号。 Microsoft Windows Vista SP2...
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (967723)
This host is missing a critical security update according to Microsoft Bulletin MS09-048. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-1925
CVE-2009-1925 is the TCP/IP Timestamps Code Execution vulnerability in Windows. A remote attacker can execute arbitrary code by sending specially crafted TCP/IP packets to a listening service; the flaw arises from the TCP/IP stack not cleaning up state information, causing a field to be misinterp...
TCP Window Size Enforcement (CVE-2008-4609; CVE-2009-1925; CVE-2009-1926)
TCP/IP is a set of networking protocols that are widely used on the Internet. TCP/IP provides communications across interconnected networks of computers that have diverse hardware architectures and that run various operating systems. Multiple vulnerabilities exist in TCP/IP processing in Microsof...
CVE-2008-1925
CVE-2008-1925 affects InspIRCd up to version 1.1.18, via the namesx and uhnames modules. A buffer overflow caused by unvalidated network input can be triggered by many channel users with crafted nicknames/idents/hostnames, enabling a remote DoS (daemon crash). The Gentoo/G scan advisories recomme...
CVE-2007-1925
The CVE-2007-1925 entry affects Tru-Zone Nuke ET 3.4 before fix 7, where the borrado function in modules/Your_Account/index.php does not verify that account deletion requests originate from the account owner. This allows remote authenticated users to delete arbitrary accounts by modifying cookies...
CVE-2005-1925
CVE-2005-1925 concerns multiple directory traversal vulnerabilities in TikiWiki before 1.9.1. The issues reside in tiki-editpage.php (suck_url) and tiki-user_preferences.php (language) where user-controlled input is read as file paths without proper sanitization, enabling reading arbitrary files ...
[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-user_preferences Command Injection Vulnerability
Tikiwiki tiki-userpreferences Command Injection Vulnerability iDEFENSE Security Advisory 11.10.05 www.idefense.com/application/poi/display?id=335&type=vulnerabilities November 10, 2005 I. BACKGROUND Tikiwiki Community Portal is a full featured, freely available, Wiki/CMS/Groupware system written ...
CVE-2002-1925
CVE-2002-1925 affects Tiny Personal Firewall versions 3.0 through 3.0.6. The vulnerability arises when an administrator views the Log tab in the Personal Firewall Agent module, enabling remote attackers to cause a denial of service (crash) by sending SYN, UDP, ICMP, or TCP port scans. The availab...