Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 4 RedHat...

pidgin: NSS plugin doesn't verify SSL certificates

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

Python 'Imageop'模块参数验证缓冲区溢出漏洞

BUGTRAQ ID: 31932 CNCAN ID：CNCAN-2008102806 Python是一款开放源代码的脚本编程语言。 Python 'Imageop'模块的不正确参数验证，远程攻击者可以利用漏洞进行缓冲区溢出而触发segfault错误。 目前没有详细漏洞细节提供，可能导致任意代码执行。 Python Software Foundation Python 2.5.2 Python Software Foundation Python 2.5.1 Python Software Foundation Python 2.4.5 Python Software Foundatio...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability (Linux)

The host is running Pidgin, which is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodpidginsslsecbypassvulnlin900022.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability Linux Authors: Chanda...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities (Windows)

The host is running Pidgin, which is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginintgroverflowwin900008.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Pidgin MSN SLP Message Integer Overflow Vulnerabilities Windows Authors: Chandan S Copyright: Copyrigh...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities (Linux)

The host is running Pidgin, which is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginintgroverflowlin900009.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Pidgin MSN SLP Message Integer Overflow Vulnerabilities Linux Authors: Chandan S Copyright:...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability (Windows)

The host is running Pidgin, which is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodpidginsslsecbypassvulnwin900020.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability Windows Authors: Sharath S...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities - Windows

Pidgin is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

Pidgin NSS插件SSL证书验证安全绕过漏洞

BUGTRAQ ID: 30553 CNCAN ID：CNCAN-2008080604 Pidgin是一款功能强大支持多个协议的开源即时通讯软件。 Pidgin NNS插件不正确验证服务器的SSL证书，远程攻击者可以利用漏洞绕过安全限制，执行中间人攻击。 设置一个Jabber服务器，使用默认的snakeoil证书，当配置pidgin连接新的服务器时，使用SSL，在连接过程中没有任何提示。这可导致用户盲目信任连接是安全的而遭受中间人攻击。 Pidgin 2.4.3 可参考如下补丁： Pidgin Pidgin 2.4.3 Pidgin nss-cert-verify.patch...

openrealty-rfi.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

Open-Realty 2.4.3 - last_module Remote Code Execution

Open-Realty 2.4.3 - lastmodule Remote Code Execution !/usr/bin/perl Vendor url: www.open-realty.org note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Open-Realty ; if$target ! /^http:/// $target = "http://".$target; if$target !...

CVE-2007-1444

netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug...

CVE-2006-0839

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths...

CVE-1999-0799

The CVE-1999-0799 issue concerns a buffer overflow in bootpd versions 2.4.3 and earlier caused by a long boot file location. Public documents confirm vulnerable software is bootpd and specify versions up to 2.4.3. The Red Hat advisory reiterates the same description. PT-1997-1167 provides a remed...

PT-1997-1167 · Isc · Bootpd

Name of the Vulnerable Software and Affected Versions: bootpd versions 2.4.3 and earlier Description: A buffer overflow issue exists due to a long boot file location. Recommendations: For versions 2.4.3 and earlier, update to a version later than 2.4.3 to resolve the issue...