107 matches found
SuSE 10 Security Update : bind (ZYPP Patch Number 2041)
This update fixes two vulnerabilities in bind that allow a remote attacker to trigger a denial-of-service attack. VU697164 - BIND INSIST failure due to excessive recursive queries, VU915404 - BIND assertion failure during SIG query processing %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
ViRobot Server web interface addschup buffer overflow
Added: 07/28/2006 CVE: CVE-2005-2041 BID: 13964 OSVDB: 17320 Background ViRobot Linux Server includes a web-based control interface. Problem A buffer overflow in the addschup CGI program included in the ViRobot Linux Server allows remote attackers to write arbitrary commands into the root crontab...
CVE-2006-2041
CVE-2006-2041 affects PhpWebGallery versions prior to 1.6.0RC1. The flaw allows remote attackers to obtain arbitrary pictures by issuing a request to picture.php without the required cat parameter. The underlying impact is a partial disclosure of data (information exposure) as reflected in the CV...
CVE-2005-2671
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2041. Reason: This candidate is a duplicate of CVE-2005-2041. Notes: All CVE users should reference CVE-2005-2041 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2002-2041
CVE-2002-2041 affects RTOS 6.1.0 due to multiple buffer overflows that let a local attacker execute arbitrary code. Exploitation vectors are (1) a long ABLANG environment variable in phlocale and (2) a long -u option to pkg-installer. CVSSv2 base score is 7.2 (HIGH); impact is complete confidenti...
CVE-2004-2041
The vulnerability CVE-2004-2041 affects e107 0.615 via a PHP remote file inclusion in secure_img_render.php. An attacker can set the p parameter to a remote URL to cause the server to execute code, enabling arbitrary PHP execution. Impact is partial confidentiality, integrity, and availability ac...