[SECURITY] [DSA 2803-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2803-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2013 http://www.debian.org/security/faq -...

CVE-2013-2236

Removed by vendor...

CVE-2013-2236

CVE-2013-2236: Quagga’s OSPFD ospf_api.c new_msg_lsa_change_notify has a stack-based buffer overflow when --enable-opaque-lsa and -a are used, allowing a remote attacker to crash the daemon via a large LSA. Affected products/versions include Quagga prior to 0.99.22.2. The issue is a denial of ser...

Updated quagga packages fix CVE-2013-2236

Updated quagga packages fix security vulnerability: Remotely exploitable buffer overflow in ospfapi.c and ospfclient.c when processing LSA messages in quagga before 0.99.22.2 CVE-2013-2236. Note: We have worked around this vulnerability by disabling the ospfapi and ospfclient features, which did...

GLSA-201310-08 : Quagga: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201310-08 Quagga: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Quagga. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to cause arbitrary code...

SuSE 11.2 / 11.3 Security Update : quagga (SAT Patch Numbers 8234 / 8235)

This update of quagga fixes two security issues : - specially crafted OSPF packets could have caused the routing table to be erased. bnc822572. CVE-2013-0149 - local network stack overflow bnc828117. CVE-2013-2236 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

CVE-2012-2236

PHP Gift Registry 1.5.5 is vulnerable to a SQL injection in users.php (userid parameter in the edit action). The issue allows remote authenticated users to execute arbitrary SQL commands. This is caused by unsafely concatenated input in the edit workflow, enabling database command execution. The ...

Debian: Security Advisory (DSA-2236-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2236-1 : exim4 - command injection

It was discovered that Exim, Debian's default mail transfer agent, is vulnerable to command injection attacks in its DKIM processing code, leading to arbitrary code execution. CVE-2011-1407 The default configuration supplied by Debian does not expose this vulnerability. The oldstable distribution...

Gentoo Security Advisory GLSA 200901-06 (tremulous tremulous-bin)

The remote host is missing updates announced in advisory GLSA 200901-06. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2008-2236

Cross-site scripting XSS vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter flavour variable. NOTE: some of these details are obtained from third party information...

CVE-2008-2236

Cross-site scripting XSS vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter flavour variable. NOTE: some of these details are obtained from third party information...

CVE-2008-2236

Cross-site scripting XSS vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter flavour variable. NOTE: some of these details are obtained from third party information...

CVE-2008-2236

Blosxom has a cross-site scripting (XSS) vulnerability (CVE-2008-2236) in blosxom.cgi before 2.1.2, exploitable via the flav parameter (flavour variable). Public sources consistently state that Blosxom

Gentoo Security Advisory GLSA 200605-12 (quake)

The remote host is missing updates announced in advisory GLSA 200605-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-2236

footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting XSS attack, or via the puninclude tag, as demonstrated by use of adminoptions.php to execute PHP code from an uploaded avatar file...

CVE-2007-2236

CVE-2007-2236 affects PunBB 1.2.14 and earlier. The description documents a cross-site scripting (XSS) vulnerability that allows remote attackers to include local files in include/user/ via an XSS vector, or via the pun_include tag, demonstrated when admin_options.php executes PHP code from an up...

CVE-2007-2236

footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting XSS attack, or via the puninclude tag, as demonstrated by use of adminoptions.php to execute PHP code from an uploaded avatar file...

CVE-2006-2236

The CVE-2006-2236 issue affects the Quake 3 engine as used in ET 2.60, Return to Castle Wolfenstein 1.41, and Quake III Arena 1.32b, caused by a boundary handling error in the remapShader command that leads to a buffer overflow. This allows a remote attacker to execute arbitrary commands on affec...

CVE-2004-2236

Technical details are not publicly available in the provided documents for CVE-2004-2236; the only information is that Moodle before 1.3.3 has an unknown vulnerability related to language setting. Monitor for updates.