Apache 2.4.x < 2.4.3 Multiple Vulnerabilities

According to its banner, the version of Apache 2.4.x running on the remote host is prior 2.4.3. It is, therefore, affected by the following vulnerabilities : - An input validation error exists related to 'modnegotiation', 'Multiviews' and untrusted uploads that can allow cross-site scripting...

otrs -- XSS vulnerability in Internet Explorer could lead to remote code execution

The OTRS Project reports: This advisory covers vulnerabilities discovered in the OTRS core system. Due to the XSS vulnerability in Internet Explorer an attacker could send a specially prepared HTML email to OTRS which would cause JavaScript code to be executed in your Internet Explorer while...

[SECURITY] Fedora 15 Update: iproute-2.6.38.1-6.fc15

The iproute package contains networking utilities ip and rtmon, for exampl e which are designed to use the advanced networking capabilities of the Linux 2.4.x and 2.6.x kernel...

ChaSen Buffer Overflow Vulnerability - Linux

ChaSen Software is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ChaSen Buffer Overflow Vulnerability (Windows)

The host is running ChaSen Software and is prone to buffer overflow vulnerability OpenVAS Vulnerability Test $Id: gbchasenbofvulnwin.nasl 5364 2017-02-20 13:26:07Z cfi $ ChaSen Buffer Overflow Vulnerability Windows Authors: Rachana Shetty Copyright: Copyright c 2011 Greenbone Networks GmbH,...

ChaSen Buffer Overflow Vulnerability - Windows

ChaSen Software is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buffer overflow

Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string...

CVE-2011-4000

Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string...

CVE-2011-4000

Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string...

CVE-2011-4000

Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string...

CVE-2011-4000

CVE-2011-4000 describes a buffer overflow in ChaSen 2.4.x that could allow remote attackers to execute arbitrary code via a specially crafted string. The underlying issue is in chalib.c, enabling remote code execution or a Denial of Service when processing crafted input. Public references in Open...

DEBIAN-CVE-2011-1518

Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

CVE-2010-4071

Cross-site scripting XSS vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail...

CVE-2010-4071

Removed by vendor...

OpenLDAP 2.4.x - modrdn NULL OldDN Remote Denial of Service

OpenLDAP 2.4.x - modrdn NULL OldDN Remote Denial of Service source: https://www.securityfocus.com/bid/46831/info OpenLDAP is prone to a remote denial-of-service vulnerability that affects the 'modify relative distinguished name' modrdn command. Attackers can exploit this issue to deny service to...

Overflow vulnerability:linux, each version corresponding overflow vulnerability finishing summary(overflow code)-vulnerability warning-the black bar safety net

2.4.17 local kmod 2.4.18 brk brk2 local kmod km. 2 2.4.19 brk brk2 local kmod km. 2 2.4.20 ptrace kmod ptrace-kmod km. 2 brk brk2 2.4.21 km. 2 brk brk2 ptrace ptrace-kmod 2.4.22 km. 2 brk2 brk ptrace ptrace-kmod 2.4.22-1 0 loginx ./ loginx 2.4.23 mremappte 2.4.24 mremappte Uselib24 2.4.25-1...

Linux Kernel tc_fill_tclass()函数本地信息泄露漏洞

BUGTRAQ ID: 36304 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的net/sched/schapi.c文件中的tcfilltclass函数没有清除某些结构成员便将其返回给了用户空间，这可能导致泄漏3个字节的未初始化内核内存。 Linux kernel 2.6.x Linux kernel 2.4.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 2.6.x chown() Group Ownership Alteration Exploit

No description provided by source. / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorchown.c - syschown missing DAC controls on Linux Copyright c 2004 Marco Ivaldi [email protected] Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of file...

Debian Security Advisory DSA 427-1 (kernel-patch-2.4.17-mips)

The remote host is missing an update to kernel-patch-2.4.17-mips announced via advisory DSA 427-1. OpenVAS Vulnerability Test $Id: deb4271.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 427-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...