CVE-2008-2276

CVE-2008-2276 is a CSRF vulnerability in Mantis 1.1.1 (manage_user_create.php) that lets an attacker create new administrative users via a crafted link. OpenVAS/Fedora entries indicate updates were released (e.g., FEDORA-2008-6647/6657) to address mantis; no further technical exploit details are ...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 2276)

The SQL Server PostgreSQL has been updated to fix the following security problems : - backend/parser/analyze.c in PostgreSQL 8.1.x allowed remote authenticated users to cause a denial of service daemon crash via certain aggregate functions in an UPDATE statement, which are not properly handled...

CVE-2002-2276

Ultimate PHP Board (UPB) 1.0 exposes a path disclosure: a direct request to add.php allows remote attackers to view the physical path of the message board via the error message. This is a remote information-disclosure vulnerability (CVE-2002-2276). Exploitation details are described across multip...

CVE-2007-2276

The CVE-2007-2276 issue affects 3Com TippingPoint IPS. A badly written loop allows remote attackers to cause a denial of service (device hang) by flooding TCP port 80 with packets that have sequentially increasing source ports. The vendor disputes the issue, stating the product has performed as e...

Debian DSA-1059-1 : quagga - several vulnerabilities

Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2223 Remote attackers may obtain sensitive information via RIPv1 REQUEST packets even if the quagga...

RHEL 2.1 : zebra (RHSA-2006:0533)

Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based routing protocol. An information disclosure flaw was foun...

zebra security update

CentOS Errata and Security Advisory CESA-2006:0533-01 Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based...

quagga security update

CentOS Errata and Security Advisory CESA-2006:0525 Updated quagga packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga manages the TCP/IP based routing protocol. It takes a...

[SECURITY] [DSA 1059-1] New quagga packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1059-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2006 http://www.debian.org/security/faq -...

CVE-2006-2276

CVE-2006-2276 affects Quagga 0.98 and 0.99 prior to 20060504. Local users via telnet can trigger a denial-of-service (CPU exhaustion) by issuing a specific “sh ip bgp” command. The OpenVAS/Nessus entries corroborate this trio of vulnerabilities (CVE-2006-2223, CVE-2006-2224, and CVE-2006-2276) in...

CVE-2004-2276

CVE-2004-2276 : F-Secure Anti-Virus 5.41/5.42 (Windows), Client Security 5.50/5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux do not properly detect certain viruses inside PKZip archives, allowing viruses such as Sober.D and Sober.G to bypass initial detection. Affected products incl...

Ultimate PHP Board add.php Direct Request Information Disclosure

The remote host is running Ultimate PHP Board UPB. There is a flaw in this version that could allow an attacker to view private message board information. %NASLMINLEVEL 70300 This script was written by Erik Stephens See the Nessus Scripts License for details Changes by Tenable: - Revised plugin...