USN-1424-1: OpenSSL vulnerabilities

It was discovered that OpenSSL could be made to dereference a NULL pointer when processing S/MIME messages. A remote attacker could use this to cause a denial of service. These issues did not affect Ubuntu 8.04 LTS. CVE-2006-7250, CVE-2012-1165 Tavis Ormandy discovered that OpenSSL did not proper...

Microsoft Windows Embedded Web Font Handling Buffer Overflow (CVE-2006-0010)

A buffer overflow vulnerability has been reported in Microsoft Windows...

PHP空字符安全限制绕过漏洞(CVE-2006-7243)

BUGTRAQ ID: 44951 CVE ID: CVE-2006-7243 PHP是一种HTML内嵌式的语言，PHP与微软的ASP颇有几分相似，都是一种在服务器端执行的嵌入HTML文档的脚本语言，语言的风格有类似于C语言，现在被很多的网站编程人员广泛的运用。 PHP 5.3.4之前版本路径名中接受\0字符，通过在此字符后放置安全的文件扩展名，攻击者可绕过目标访问限制。 0 PHP 5.3.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net...

SuSE 11.1 Security Update : OpenSSL (SAT Patch Number 6054)

The following security issues have been fixed : - Specially crafted MIME headers could cause openssl's ans1 parser to dereference a NULL pointer leading to a Denial of Service CVE-2006-7250 or fail verfication. CVE-2012-1165 - The implementation of Cryptographic Message Syntax CMS and PKCS 7 in...

CVE-2006-5276

creationtimestamp| type| source ---|---|--- 2012-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18723 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/ids/snortdcerpc.rb 2025-02-06 03:13:38+00:00| seen|...

Jabber Studio Jabberd Server SASL Negotiation DoS Vulnerability

Jabberd server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BELL-CVE-2006-7250 CVE-2006-7250 does not affect BellSoft software

Bulletin has no description...

CVE-2006-7249

...

CVE-2006-7250

OpenSSL mime_hdr_cmp (crypto/asn1/asn_mime.c) in versions 0.9.8t and earlier is vulnerable. A crafted S/MIME message can trigger a NULL pointer dereference, causing a denial of service (application crash). The CVE description states this affects OpenSSL 0.9.8t and older; the vulnerability is remo...

CVE-2006-7249

CVE-2006-7249 is rejected/not used; this candidate should not be used.

CVE-2006-7248

...

CVE-2006-7248

CVE-2006-7248 is rejected and does not represent an active vulnerability entry.

RedHat Update for busybox RHSA-2012:0308-03

Check for the Version of busybox OpenVAS Vulnerability Test RedHat Update for busybox RHSA-2012:0308-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for busybox RHSA-2012:0308-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 : busybox (RHSA-2012:0308)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0308 advisory. BusyBox provides a single binary that includes versions of a large number of system commands, including a shell. This can be very useful for...

SuSE 10 Security Update : NetworkManager (ZYPP Patch Number 7957)

NetworkManager did not pin a certificate's subject to an ESSID. A rogue access point could therefore be used to conduct MITM attacks by using any other valid certificate issued by same CA as used in the original network. CVE-2006-7246 Please note that existing WPA2 Enterprise connections need to ...

SuSE 11.1 Security Update : NetworkManager-gnome (SAT Patch Number 5621)

NetworkManager did not pin a certificate's subject to an ESSID. A rogue access point could therefore be used to conduct MITM attacks by using any other valid certificate issued by same CA as used in the original network. CVE-2006-7246 Please note that existing WPA2 Enterprise connections need to ...

MySQL < 5.0.25 / 5.1.12 Privilege Escalation

The version of MySQL installed on the remote host is earlier than 5.0.25 / 5.1.12 and thus reportedly allows a remote, authenticated user to gain privileges through a stored routine. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17808; scriptversion"1.8";...

MySQL < 4.1.21 / 5.0.25 / 5.1.12 Access Control

The version of MySQL installed on the remote host is earlier than 4.1.21 / 5.0.25 / 5.1.12 and thus reportedly allows a remote user who has access rights on one database to access another database if the names differ only in case. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

MySQL < 5.0.22 / 5.1.10 Authentication Bypass

The version of MySQL installed on the remote host is earlier than 5.0.22 / 5.1.10 and thus reportedly allows a local user to bypass authentication by sending a SQL query that contains a NULL character. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17801;...