74 matches found
Fedora 7 : quagga-0.99.7-1.fc7 (2007-0838)
Upgrade to new upstream 0.99.7 should also fix the CVE-2007-1995 Quagga bgpd DoS Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
openSUSE 10 Security Update : quagga (quagga-3233)
Remote attackers could crash quagga via specially crafted 'UPDATE' messages CVE-2007-1995. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update quagga-3233. The text description of this plugin is C...
Fedora Core 6 : quagga-0.99.7-1.fc6 (2007-525)
This update contains rebase to quagga-0.99.7 along with fix for CVE-2007-1995. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
CentOS 3 / 4 / 5 : quagga (CESA-2007:0389)
An updated quagga package that fixes a security bug is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga is a TCP/IP based routing software suite. An out of bounds memory read flaw was...
Moderate: Red Hat Security Advisory: quagga security update
An updated quagga package that fixes a security bug is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga is a TCP/IP based routing software suite. An out of bounds memory read flaw was...
Moderate: quagga security update
0.98.3-2.4.0.1 - rebuild and nvr fix - resolves: 240481: CVE-2007-1995 Quagga bgpd DoS 0.98.3-2.0.1 - resolves: 240481: CVE-2007-1995 Quagga bgpd DoS...
[SECURITY] [DSA 1293-1] New quagga packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1293-1 [email protected] http://www.debian.org/security/ Martin Schulze May 17th, 2007 http://www.debian.org/security/faq -...
CVE-2007-1995
CVE-2007-1995 affects Quagga bgpd. Affects bgpd in Quagga 0.98.6 and earlier, and 0.99.6 and earlier (including 0.99.x before 0.99.7) where MP_REACH_NLRI/MP_UNREACH_NLRI length values aren’t properly validated. A remote attacker could trigger an assertion or an out-of-bounds read via crafted UPDA...
CVE-2006-1995
CVE-2006-1995 affects Scry Gallery 1.1. The vulnerability is a directory traversal in index.php, exploitable via the p parameter containing .. sequences. The root cause is improper sanitization due to an rtrim function call with arguments in the wrong order. Documents provided do not include spec...
CVE-2006-1995
Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order...
CVE-2002-1995
CVE-2002-1995: A cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the filnavn parameter. Affected component is phptonuke.php within PHP-Nuke; the underlying issue is input that is not properly sanitized, enab...
CVE-2005-1995
Bitrix Site Manager 4.0.x is affected by an information disclosure vulnerability. The issue occurs when remote attackers request one of two PHP scripts (subscr_form.php or dbquery_error.php) and trigger an error message that reveals the installation path, exposing sensitive information. The vulne...
CVE-2004-1995
FuseTalk 2.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that lets remote attackers create arbitrary user accounts via a request to adduser.cfm. The issue is tied to the adduser.cfm endpoint and is described in multiple sources (including PT-2004-2891) as enabling account cre...
