97 matches found
SuSE 11 / 11.1 Security Update : clamav (SAT Patch Numbers 2479 / 2480)
This update fixes the following security issues in clamav that can be used as a remote denial of service attack : - A off-by-one buffer overflow. CVE-2010-1640 - A crash while parsing PDFs CVE-2010-1639 / CVE-2010-2077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
SuSE 10 Security Update : clamav (ZYPP Patch Number 7056)
This update fixes the following security issues in clamav that can be used as a remote denial of service attack : - An off-by-one buffer overflow. CVE-2010-1640 - A crash while parsing PDFs CVE-2010-1639 / CVE-2010-2077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...
Debian: Security Advisory (DSA-2077-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2077-1 (openldap)
The remote host is missing an update to openldap announced via advisory DSA 2077-1. OpenVAS Vulnerability Test $Id: deb20771.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2077-1 openldap Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian DSA-2077-1 : openldap - several vulnerabilities
Two remote vulnerabilities have been discovered in OpenLDAP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0211 The slapmodrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smrnormalize function, whi...
openSUSE Security Update : clamav (openSUSE-SU-2010:0414-1)
This update fixes a off-by-one buffer overflow CVE-2010-1640 and a crash while parsing PDFs CVE-2010-1639, CVE-2010-2077 in clamav that can be used as a remote denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
openSUSE Security Update : clamav (openSUSE-SU-2010:0414-1)
This update fixes a off-by-one buffer overflow CVE-2010-1640 and a crash while parsing PDFs CVE-2010-1639, CVE-2010-2077 in clamav that can be used as a remote denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
Ubuntu 9.04 / 9.10 / 10.04 LTS : clamav vulnerabilities (USN-945-1)
It was discovered that ClamAV did not properly reallocate memory when processing certain PDF files. A remote attacker could send a specially crafted PDF and crash ClamAV. CVE-2010-1639 An out of bounds memory access flaw was discovered in ClamAV. A remote attacker could send a specially crafted...
USN-945-1: ClamAV vulnerabilities
It was discovered that ClamAV did not properly reallocate memory when processing certain PDF files. A remote attacker could send a specially crafted PDF and crash ClamAV. CVE-2010-1639 An out of bounds memory access flaw was discovered in ClamAV. A remote attacker could send a specially crafted...
CVE-2009-2077
CVE-2009-2077 affects Drupal 6.x before 6.x-2.6 via a Drupal module, permitting remote authenticated users to bypass access restrictions. The issue enables: (1) reading unpublished content from anonymous users when a view is configured to display that content, and (2) reading private content in g...
CVE-2009-2077
Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and 1 read unpublished content from anonymous users when a view is already configured to display the content, and 2 read private content in generated queries...
Gentoo Security Advisory GLSA 200605-10 (pdnsd)
The remote host is missing updates announced in advisory GLSA 200605-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-2077
The CVE-2008-2077 entry concerns Plain Black WebGUI prior to version 7.4.35, where data form list view handling is implicated. Connected sources indicate a vulnerability labeled as WebGUI
CVE-2002-2077
The vulnerability CVE-2002-2077 affects the DCOM client on Windows 2000 prior to SP3. The issue arises because memory is not properly cleared before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session. Connected Red Hat/CVE ...
CVE-2005-2077
CVE-2005-2077 corresponds to a cross-site scripting (XSS) vulnerability in Hosting Controller’s error.asp, exploitable via the error parameter. The associated connected data confirms the affected product is Hosting Controller, with error.asp being the vulnerable component and the root cause being...
CVE-2004-2077
Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service server crash via malformed data to TCP port 2350, possibly due to long values or incorrect size fields...