SuSE 10 Security Update : Python (ZYPP Patch Number 5490)

This update of python fixes several security vulnerabilities. CVE-2008-1679 / CVE-2008-1887 / CVE-2008-3143 / CVE-2008-3142 / CVE-2008-3144 / CVE-2008-2315 / CVE-2008-2316 Note: for SLE10 a non-security bug in mmap was fixed too. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

Python存在多个缓冲区溢出漏洞

BUGTRAQ ID: 30491 CVE ID：CVE-2008-2315 CVE-2008-2316 CVE-2008-3142 CVE-2008-3143 CVE-2008-3144 CNCVE ID：CNCVE-20082315 CNCVE-20082316 CNCVE-20083142 CNCVE-20083143 CNCVE-20083144 Python是一款开放源代码的脚本编程语言。 Python中存在多个整数溢出漏洞，远程攻击者可以利用漏洞对应用程序进行拒绝服务或者任意代码执行攻击。 1...

Slackware 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / current : python (SSA:2008-217-01)

New python packages are available for Slackware 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-217-01. The text itse...

[slackware-security] python

New python packages are available for Slackware 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1679 https://vulners.com/cve/CVE-2008-1721...

CVE-2008-2316

Integer overflow in hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."...

CVE-2008-2316

CVE-2008-2316 is a Python hashlib vulnerability affecting Python 2.5.2 and earlier, caused by an integer overflow in _hashopenssl.c that can compromise cryptographic digests when hashing data, particularly with data exceeding 4 GB. Several OpenVAS entries and related advisories reference this CVE...

CVE-2008-2316

Integer overflow in hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."...

CVE-2002-2316

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 may fail to learn MAC addresses from a single initial packet, causing unicast traffic to be broadcast and allowing remote attackers to sniff sensitive network information. The connected Red Hat and CVE registries confirm th...

CVE-2007-2316

Technical details for CVE-2007-2316 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-2316

CVE-2006-2316 concerns a local information-disclosure flaw in Intel PROSet/Wireless Software caused by insecure usage of a shared memory section (S24EventManagerSharedMemory) by S24EvMon.exe. Intel PROSet/Wireless Software 7.x, 8.x, 9.x, and 10.x are affected; specific affected products/versions ...

CVE-2005-2316

CVE-2005-2316 affects Domain Name Relay Daemon (DNRD) prior to version 2.19.1. The vulnerability arises from a DNS packet using message compression in the QNAME with two pointers that reference each other (circular buffer), allowing remote attackers to trigger infinite recursion and cause a denia...

CVE-2004-2316

CVE-2004-2316 affects the Mbedthis AppWeb HTTP server prior to 1.0.2. A remote attacker can crash the server by sending a GET request that contains an MS-DOS device name (e.g., COM1). The available sources confirm the vulnerable software/version and the crash-based impact; no exploit details or c...

CVE-2004-2316

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...

MS:0D9B8BCD-2316-430E-832E-18E17964618A

...