99 matches found
Nginx 1.3.9 1.4.0 - Denial of Service (PoC)
Nginx 1.3.9 1.4.0 - Denial of Service PoC Exploit Title: nginx v1.3.9-1.4.0 DOS POC CVE-2013-2028 Google Dork: CVE-2013-2028 Date: 16.05.2013 Exploit Author: Mert SARICA - mert . sarica @ gmail . com - http://www.mertsarica.com Vendor Homepage: http://nginx.org/ Software Link:...
nginx 'ngx_http_parse.c'栈缓冲区溢出漏洞
BUGTRAQ ID: 59699 CVECAN ID: CVE-2013-2028 nginx是HTTP及反向代理服务器，同时也用作邮件代理服务器。 nginx 1.3.9 - 1.4.0在解析HTTP块时，"ngxhttpparsechunked"函数 http/ngxhttpparse.c中存在错误，可被利用造成栈缓冲区溢出。 0 Nginx 1.3.9 - 1.4.0 临时解决方法： 建议您升级到nginx 1.4.1或者是1.5.0。但如果您不能立刻安装补丁或者升级，您可以采取以下措施以降低威胁： 在每个server块中使用如下配置 if $httptransferencodi...
Nginx 1.3.9 < 1.4.0 - Denial of Service (PoC)
Exploit Title: nginx v1.3.9-1.4.0 DOS POC CVE-2013-2028 Google Dork: CVE-2013-2028 Date: 16.05.2013 Exploit Author: Mert SARICA - mert . sarica @ gmail . com - http://www.mertsarica.com Vendor Homepage: http://nginx.org/ Software Link: http://nginx.org/download/nginx-1.4.0.tar.gz Version:...
Nginx 1.3.9 / 1.4.0 Denial Of Service
Exploit Title: nginx v1.3.9-1.4.0 DOS POC CVE-2013-2028 Date: 16.05.2013 Exploit Author: Mert SARICA - mert . sarica @ gmail . com - http://www.mertsarica.com Vendor Homepage: http://nginx.org/ Software Link: http://nginx.org/download/nginx-1.4.0.tar.gz Version: 1.3.9-1.4.0 Tested on: Kali Linux ...
Fedora 19 : nginx-1.4.1-1.fc19 (2013-7560)
Update to upstream release 1.4.1 which fixes : - CVE-2013-2028: Stack-based buffer overflow when handling certain chunked transfer encoding requests Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
FreeBSD : nginx -- multiple vulnerabilities (efaa4071-b700-11e2-b1b9-f0def16c5c1b)
The nginx project reports : A stack-based buffer overflow might occur in a worker process process while handling a specially crafted request, potentially resulting in arbitrary code execution. CVE-2013-2028 A security problem related to CVE-2013-2028 was identified, affecting some previous nginx...
nginx < 1.4.1 / 1.5.0 Multiple Vulnerabilities
Binary data 6795.prm...
Security fix for the ALT Linux 9 package nginx version 1.4.1-alt1
May 7, 2013 Denis Smirnov 1.4.1-alt1 - 1.4.1 - CVE-2013-2028...
nginx -- multiple vulnerabilities
The nginx project reports: A stack-based buffer overflow might occur in a worker process process while handling a specially crafted request, potentially resulting in arbitrary code execution. CVE-2013-2028 A security problem related to CVE-2013-2028 was identified, affecting some previous nginx...
Adobe Photoshop < CS5 / CS5.1 Multiple Arbitrary Code Execution Vulnerabilities (APSB12-11)
The version of Adobe Photoshop installed on the remote Windows host is prior to CS5 12.0.5 or CS5.1 12.1.1. It is, therefore, multiple arbitrary code execution vulnerabilities : - Multiple heap-based buffer overflow conditions exist due to a failure to properly sanitize user-supplied input when...
CVE-2012-2028
Adobe Photoshop CS5/CS5.1 (12.x) is affected by CVE-2012-2028 via multiple heap-based buffer overflow vulnerabilities disclosed in APSB12-11. The issues arise in the TIFF image handling, U3D.8bi plugin, and a SGI24LogLum TIFF path, where improper input sanitization allows an unauthenticated, remo...
CVE-2010-2028
CVE-2010-2028 affects k23productions’ TFTPUtil GUI (aka TFTPGUI) version 1.4.5. The vulnerability is a buffer overflow in the handling of a long transport mode, enabling a remote attacker to cause a crash (DoS) and potentially execute arbitrary code. Exploitation details are not provided in the i...
Debian Security Advisory DSA 2028-1 (xpdf)
The remote host is missing an update to xpdf announced via advisory DSA 2028-1. OpenVAS Vulnerability Test $Id: deb20281.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2028-1 xpdf Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian: Security Advisory (DSA-2028-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2028-1 : xpdf - multiple vulnerabilities
Several vulnerabilities have been identified in xpdf, a suite of tools for viewing and converting Portable Document Format PDF files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1188 and CVE-2009-3603 Integer overflow in SplashBitmap::SplashBitm...
SLES9: Security update for freeradius
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: freeradius freeradius-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...
SLES9: Security update for freeradius
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: freeradius freeradius-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...
RHEL 3 / 4 / 5 : acroread (RHSA-2009:1109)
Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team...
RedHat Security Advisory RHSA-2009:1109
The remote host is missing updates announced in advisory RHSA-2009:1109. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple security flaws were discovered in Adobe Reader. A specially crafted PDF file could cause Adobe Reader to crash or, potentially,...
Critical: Red Hat Security Advisory: acroread security update
Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team...