CVE-2009-5072

Memory leak in the ldapexplodedn function in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.61 aka 6.0.0.8-TIV-ITDS-IF0003 allows remote authenticated users to cause a denial of service memory consumption via an empty string argument...

CVE-2009-5073

CVE-2009-5073 affects IBM Tivoli Directory Server (TDS) 6.0 prior to 6.0.0.59 (6.0.0.8-TIV-ITDS-IF0001). A remote authenticated user can trigger a denial-of-service by adding a nested group that includes the DN of its parent entry, causing an infinite loop and daemon hang. Impact is a partial ava...

CVE-2009-5072

CVE-2009-5072 affects IBM Tivoli Directory Server 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003). A memory leak in ldap_explode_dn triggered by an empty string argument allows remote authenticated users to cause a denial of service via memory consumption. No remediation details are provided in...

CVE-2009-5022

Heap-based buffer overflow in tifojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file...

Fedora 14 : libtiff-3.9.5-1.fc14 (2011-5304)

Update to libtiff 3.9.5, incorporating all our previous patches plus other fixes, notably the fix for CVE-2009-5022 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

CVE-2009-5071

CVE-2009-5071 (Palm Pre WebOS before 1.2.1) technical details are not publicly available in the provided documents; monitor for updates.

RHEL 6 : libtiff (RHSA-2011:0452)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0452 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow flaw was found...

CVE-2009-0788

RHN Satellite (Red Hat Network Satellite) on RHEL 5.3/5.4 is affected by CVE-2009-0788 due to improper rewriting of certain URLs, enabling an unauthenticated attacker to obtain sensitive host information or misuse the server as a proxy to reach arbitrary services/IPs. Red Hat’s RHSA-2011:0434 doc...

libtiff security update

3.9.4-1.el60.3 - Add fix for CVE-2009-5022 Resolves: 696143...

Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)

Microsoft Word 2003 - Record Parsing Buffer Overflow MS09-027 Metasploit $Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and...

Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)

$Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and maxlen add those parameters to the .rb file drop in appropriate directory...

CVE-2009-5065

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...

CVE-2009-5065

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...

CVE-2009-5065

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...

CVE-2009-5065

CVE-2009-5065 is a cross-site scripting (XSS) vulnerability in the feedparser.py component of Universal Feed Parser (python-feedparser) prior to version 5.0. The flaw allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas. The issue has been disc...

CVE-2009-5065

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...

Mandriva Update for ffmpeg MDVSA-2011:061 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-5065

creationtimestamp| type| source ---|---|--- 2011-04-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35570...

Mariposa: December, 2009

The takedown of the Mariposa botnet is an example of both the possibilities and complications facing law enforcement around the world as they work to stamp out botnets. A cyberlaw enforcement success story, the take down of Mariposa by Spanish authorities in December, 2009, followed months of wor...

HP-UX PHNE_41907 : HP-UX Running XNTP, Remote Denial of Service (DoS) (HPSBUX02639 SSRT100293 rev.1)

s700800 11.11 NTP timeservices upgrade plus utilities : A potential security vulnerability has been identified with HP-UX running XNTP. The vulnerability could be exploited remotely create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...