CVE-2012-2224

CVE-2012-2224 affects Xunlei Thunder prior to 7.2.6, where a crafted file can trigger a DLL injection vulnerability that allows remote attackers to execute arbitrary code. The vulnerability is described as a DLL injection issue with network access as the attack vector (AV:N, AC:L, C:P/I:P/A:P). T...

CVE-2011-2224

CVE-2011-2224 – Normal mode Affected product: Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428. Vulnerability: Missing HTTPOnly flag in a Set-Cookie header, which can enable cross-site scripting (XSS) via unspecified vectors. Impact: Remote XSS potential as describ...

Debian Security Advisory DSA 2224-1 (openjdk-6)

The remote host is missing an update to openjdk-6 announced via advisory DSA 2224-1. OpenVAS Vulnerability Test $Id: deb22241.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2224-1 openjdk-6 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2010-2224

CVE-2010-2224 affects Red Hat Enterprise Virtualization Manager (RHEV-M) prior to version 2.2. The issue is that the snapshot merging function does not properly pass the postzero parameter during operations on deleted volumes, which can allow a guest OS to read (inspecting) disk blocks belonging ...

CVE-2009-2224

CVE-2009-2224 describes a Local File Inclusion (LFI) in AN Guestbook 0.7.8 via a directory-traversal flaw in ang/shared/flags.php when register_globals is enabled. The issue allows reading arbitrary files by supplying .. in the g_lang parameter. Affected software is AN Guestbook (version 0.7.8); ...

Gentoo Security Advisory GLSA 200605-15 (quagga)

The remote host is missing updates announced in advisory GLSA 200605-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2224

creationtimestamp| type| source ---|---|--- 2008-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5566...

SuSE 10 Security Update : ruby (ZYPP Patch Number 2224)

A denial of service problem in the CGI multipart parsing of 'ruby' was fixed, which could have allowed remote attackers to affect a denial of service attack against ruby based webservices. CVE-2006-5467 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

openSUSE 10 Security Update : quagga (quagga-1422)

It was possible to bypass RIPv2 authentication requirements by using RIPv1. Since RIPv1 doesn't support authentication at all this update introduces an option to switch off RIPv1 CVE-2006-2223, CVE-2006-2224. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2007-2224

CVE-2007-2224 describes an OLE Automation memory corruption in Windows components (TextNode.substringData) that can lead to remote code execution. Affected: Windows 2000 SP4, XP SP2, Server 2003 SP1/SP2, Office 2004 for Mac, Visual Basic 6.0. Root cause: integer overflow during substringData hand...

CVE-2002-2224

Buffer overflow in PGPFreeware 7.03 for Windows NT 4.0 SP6 can be triggered by crafted Internet Key Exchange (IKE) response packets (e.g., large SPI, many payloads, long payload), enabling remote DoS and potentially arbitrary code execution. No explicit remediation is provided in the available do...

Debian DSA-1059-1 : quagga - several vulnerabilities

Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2223 Remote attackers may obtain sensitive information via RIPv1 REQUEST packets even if the quagga...

RHEL 2.1 : zebra (RHSA-2006:0533)

Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based routing protocol. An information disclosure flaw was foun...

zebra security update

CentOS Errata and Security Advisory CESA-2006:0533-01 Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based...

quagga security update

CentOS Errata and Security Advisory CESA-2006:0525 Updated quagga packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga manages the TCP/IP based routing protocol. It takes a...

[SECURITY] [DSA 1059-1] New quagga packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1059-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1519

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2224. Reason: This candidate is a duplicate of CVE-2006-2224. Notes: All CVE users should reference CVE-2006-2224 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...

CVE-2006-2224

CVE-2006-2224 affects Quagga RIPd where RIPv2 authentication is not properly enforced, allowing remote attackers to inject/modify routes via RIPv1 RESPONSE packets. Affected are Quagga 0.98 and 0.99 before 20060503. Public advisories (Debian, Fedora/OpenVAS, Gentoo) indicate upgrading to fixed re...

PT-2006-2224 · Sergey Korostel · Sergey Korostel Php Upload Center

Name of the Vulnerable Software and Affected Versions: Sergey Korostel PHP Upload Center affected versions not specified Description: The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a name that ends in a .php.li extension. This file can then be accessed fr...