123 matches found
SLES9: Security update for ethereal
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015871 within the Su...
CVE-2009-2363
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls playlist file with a playlist entry containing a long File1 argument...
CVE-2009-2363
The CVE-2009-2363 entry describes a stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 that can allow remote code execution when processing a .pls playlist with a long File1 argument. Affected software: KUDRSOFT AudioPLUS 2.00.215. Root cause: inadequate bounds checking in playlist parsin...
Mandriva Linux Security Advisory : pan (MDVSA-2008:201)
Pavel Polischouk found a boundary error in the PartsBatch class in the Pan newsreader when processing .nzb files, which could allow remote attackers to cause a denial of serice application crash or possibly execute arbitrary code via a crafted .nzb file CVE-2008-2363. The updated packages have be...
Mandriva Update for pan MDVSA-2008:201 (pan)
Check for the Version of pan OpenVAS Vulnerability Test Mandriva Update for pan MDVSA-2008:201 pan Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Mandriva Update for pan MDVSA-2008:201 (pan)
Check for the Version of pan OpenVAS Vulnerability Test Mandriva Update for pan MDVSA-2008:201 pan Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Gentoo Security Advisory GLSA 200807-15 (pan)
The remote host is missing updates announced in advisory GLSA 200807-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200507-27 (Ethereal)
The remote host is missing updates announced in advisory GLSA 200507-27. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
[slackware-security] pan
New pan packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2363 Here are the details from the Slackware 12.1 ChangeLog:...
CVE-2007-2363
creationtimestamp| type| source ---|---|--- 2008-08-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6188...
openSUSE 10 Security Update : pan (pan-5325)
Specially crafted nzb files could trigger a heap based buffer overflow that could potentially be exploited to execute arbitrary code CVE-2008-2363. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
CVE-2008-2363
The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow...
CVE-2008-2363
The CVE-2008-2363 entry affects Pan 0.132 and earlier, where the PartsBatch class fails to correctly manage data structures for Parts batches. This can allow remote attackers to cause a denial of service (application crash) and potentially execute arbitrary code via a crafted .nzb file that trigg...
Pan .nzb文件解析堆溢出漏洞
BUGTRAQ ID: 29421 CVECAN ID: CVE-2008-2363 Pan是为GNOME设计的Usenet新闻阅读器。 Pan在解析.nzb文件时存在堆溢出漏洞，如果用户受骗读取了恶意的.nzb文件的话，就可以触发这个溢出，但最可能导致的是出现断言错误或分段错误。 Pan Pan 0.132 Pan Pan 0.131 Pan Pan 0.130 Pan Pan 0.129 Pan Pan 0.128 Pan --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2002-2363
CVE-2002-2363 affects HP-UX 11.00 via the VJE.VJE-RUN component, which adds the bin directory to /etc/PATH, enabling local users to gain privileges. The vulnerability is rooted in PATH modification by VJE.VJE-RUN, with the described impact including potential privilege elevation. Exploitation det...
CVE-2007-2363
CVE-2007-2363 concerns a buffer overflow in IrfanView up to version 4.00, triggered by parsing a crafted .IFF file. The vulnerability is documented as user-assisted remote code execution via image file parsing, with the root cause described as a buffer overflow in the IFF handling component. Affe...
CVE-2006-2363
CVE-2006-2363 affects Limbo CMS via the weblinks option (weblinks.html.php). The vulnerability is a SQL injection in the catid parameter that can allow an unauthenticated attacker to influence database queries, potentially exposing password hashes when Limbo uses MySQL. Exploitation details and i...
Debian DSA-853-1 : ethereal - several vulnerabilities
Several security problems have been discovered in ethereal, a commonly used network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2360 Memory allocation errors in the LDAP dissector can cause a denial of service. - CAN-2005-2361...
[SECURITY] [DSA 853-1] New ethereal packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 853-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...