118 matches found
CVE-2008-2092
The CVE-2008-2092 issue affects the Linksys SPA-2102 Phone Adapter with firmware 3.3.6, where a remote attacker can cause a denial-of-service (crash) by sending a long ping packet (ping of death) over the network. The available records state this is a network-facing flaw with high impact (CVSS v2...
CVE-2008-2092
Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: the severity of this issue has been disputed since there are limited attack scenarios...
CVE-2008-2092: Undefined Security Weakness
Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: the severity of this issue has been disputed since there are limited attack scenarios...
Linksys SPA-2102 wireless IP phones DoS
Large ICMP packets cause device to crash...
Linksys phone adapter denial of service
Linksys phone adapter denial of service Product Information Product Name: SPA-2102 Serial Number: FM500G582390 Software Version: 3.3.6 Hardware Version: 1.2.5a Another device hit with the PoD! ping -l 65500 192.168.0.1 Only seems to work on the internal network. discovered by sipher...
Linksys SPA-2102 Phone Adapter Packet Handling - Denial of Service
Linksys SPA-2102 Phone Adapter Packet Handling - Denial of Service source: https://www.securityfocus.com/bid/28414/info Linksys SPA-2102 Phone Adapter is prone to a denial-of-service vulnerability when handling multiple packets in quick succession. Attackers can exploit this issue to deny access ...
Linksys SPA-2102 Phone Adapter Packet Handling - Denial of Service
source: https://www.securityfocus.com/bid/28414/info Linksys SPA-2102 Phone Adapter is prone to a denial-of-service vulnerability when handling multiple packets in quick succession. Attackers can exploit this issue to deny access to the device's control center for legitimate users. Reports indica...
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 2102)
the CURL module lacked checks for control characters CVE-2006-2563 - strrepeat contained an integer overflow - ext/wddx contained a buffer overflow - memorylimit lacked checks for integer overflows - a bug in sscanf could potentially be exploited to execute arbitrary code. CVE-2006-4020 - an...
CVE-2007-2102
CVE-2007-2102 is a cross-site scripting (XSS) vulnerability in the weblog.php component of my little weblog . The provided details specify that the vulnerability can be triggered by supplying a crafted value to the id parameter, allowing remote attackers to inject arbitrary web script or HTML. Th...
CVE-2007-2102
Cross-site scripting XSS vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vector than CVE-2006-6087...
FreeBSD : gaim -- AIM/ICQ non-UTF-8 filename crash (09db2844-0b21-11da-bc08-0001020eed82)
The GAIM team reports : A remote user could cause Gaim to crash on some systems by sending the Gaim user a file whose filename contains certain invalid characters. It is unknown what combination of systems are affected, but it is suspected that Windows users and systems with older versions of GTK...
CVE-2006-2102
CVE-2006-2102 is a directory traversal vulnerability in PowerISO 2.9. The issue allows remote attackers to write arbitrary files by placing a ".." in a filename inside an ISO image. The available connected documents confirm the affected product/version and the core impact (unauthorized file write...
CVE-2005-2102
CVE-2005-2102 affects the GAIM/ICQ module in Gaim prior to 1.5.0. A remote attacker can cause a denial of service (application crash) by sending a filename containing invalid UTF-8 characters. Mitigation: upgrade to Gaim 1.5.0 or newer (as indicated by multiple advisories in connected documents)....
RHEL 3 / 4 : gaim (RHSA-2005:627)
An updated gaim package that fixes multiple security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Gaim is an Internet Messaging client. A heap based buffer overflow issue was discovered in the way Gaim processes away...
CVE-2004-2102
CVE-2004-2102 describes a cross‑site scripting (XSS) vulnerability in FREESCO 2.05 (a modified version of thttpd). The issue allows remote attackers to inject arbitrary web script or HTML via the test parameter. The connected sources confirm the affected product and parameter, and indicate the vu...
CVE-2004-2102
Cross-site scripting XSS vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter...
