CVE-2008-1612

The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...

PT-2008-3168 · Squid +1 · Squid +2

Name of the Vulnerable Software and Affected Versions: Squid version 2.6.STABLE17 Description: The issue is related to the arrayShrink function in lib/Array.c, which allows attackers to cause a denial of service, resulting in a process exit. This occurs when an array is shrunk to 0 entries,...

XSS vulnerabilities in insert image and link actions

In 2.7.x, the following URL's are vulnerable: - /users/insertlink.action - /users/insertlink-page-attachmentstab.action - /users/insertlink-page-uploadfile.action - /users/insertlink-draft-attachmentstab.action - /users/insertlink-draft-uploadfile.action - /users/doinsertimageinpage.action -...

XSS vulnerabilities in insert image and link actions

In 2.7.x, the following URL's are vulnerable: - /users/insertlink.action - /users/insertlink-page-attachmentstab.action - /users/insertlink-page-uploadfile.action - /users/insertlink-draft-attachmentstab.action - /users/insertlink-draft-uploadfile.action - /users/doinsertimageinpage.action -...

XSS vulnerability in pagepicker.action and spacepagepicker.action

The following URL's are vulnerable: - /users/pagepicker.action - /users/spacepagepicker.action on formname, fieldname and currentspace panel:bgColor=99ff99 h4. Patch instructions for 2.6.x and 2.7.x 1. Shut down Confluence 2. Copy attached pagepicker.vm to confluence/users/ 3. Start up Confluence...

CVE-2008-1157

Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands...

Debian Security Advisory DSA 1494-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1494-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian: Security Advisory (DSA-1494-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1494-2 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1494-2. OpenVAS Vulnerability Test $Id: deb14942.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1494-2 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Fedora 7 : kernel-xen-2.6-2.6.21-7.fc7 (2008-1629)

CVE-2008-0600 fix bug 432517 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 8 : kernel-xen-2.6-2.6.21-2957.fc8 (2008-1433)

CVE-2008-0600 fix bug 432517 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 1494-2] New linux-2.6 packages fix privilege escalation

---------------------------------------------------------------------- Debian Security Advisory DSA-1494-2 [email protected] http://www.debian.org/security/ Florian Weimer, dann frazier February 12, 2008 http://www.debian.org/security/faq -...

[SECURITY] Fedora 8 Update: kernel-xen-2.6-2.6.21-2957.fc8

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

CVE-2008-0163

Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc...

Design/Logic Flaw

Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc...

Debian DSA-1494-2 : linux-2.6 - missing access checks

The vmsplice system call did not properly verify address arguments passed by user space processes, which allowed local attackers to overwrite arbitrary kernel memory, gaining root privileges CVE-2008-0010, CVE-2008-0600 . In the vserver-enabled kernels, a missing access check on certain symlinks ...

DSA-1494-1 linux-2.6 - privilege escalation

Bulletin has no description...

[Full-disclosure] [SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1494-1 [email protected] http://www.debian.org/security/ Florian Weimer February 11, 2008 http://www.debian.org/security/faq -...

CVE-2008-0174

GE Fanuc Proficy Real-Time Information Portal (2.6 and earlier) uses HTTP Basic Authentication, transmitting usernames in cleartext and passwords in Base64, enabling credential theft and potential privilege gain via network interception. Affects Proficy Information Portal up to version 2.6. Remed...

Debian Security Advisory DSA 1363-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1363-1. OpenVAS Vulnerability Test $Id: deb13631.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1363-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...