CVE-2010-2365

CVE-2010-2365 affects moobbs2 (Free CGI Moo moobbs2) prior to version 1.03. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML, executed in a victim’s browser. Affected product/version: moobbs2 1.02 and earlier. Root cause de...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015871 within the Su...

CVE-2009-2365

CVE-2009-2365 describes a SQL injection vulnerability in the login.asp page of DataCheck Solutions GalleryPal FE 1.5. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The impact is partial confidentiality, integrity, and availability as per the NVD desc...

Ubuntu: Security Advisory (USN-625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for kernel CESA-2008:0508 centos4 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0508 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Gentoo Security Advisory GLSA 200507-27 (Ethereal)

The remote host is missing updates announced in advisory GLSA 200507-27. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

RHEL 4 : kernel (RHSA-2008:0508)

Updated kernel packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2008-2365

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux RHEL 4, allows local users to cause a denial of service oops via a long series of PTRACEATTACH ptrace calls to another user's process that trigger a conflict between...

Double free

Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux RHEL 5 and Fedora Core 6 FC6 allows local users to cause a denial of service oops, as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than...

CVE-2008-2365

CVE-2008-2365 describes a race condition in Linux kernel ptrace/utrace support (kernel 2.6.9–2.6.25) used by RHEL4. A local user can cause a denial of service (oops) by issuing a long sequence of PTRACE_ATTACH calls that trigger a conflict between utrace_detach and report_quiescent due to a late ...

Linux Kernel utrace和ptrace本地拒绝服务漏

BUGTRAQ ID: 29945 CVE ID：CVE-2008-2365 CNCVE ID：CNCVE-20082365 Linux是一款开放源代码的操作系统。 Linux utrace/ptrace挂接和卸载存在竞争条件问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 ptracemayattach包含如下代码： static int ptraceattachstruct taskstruct task ... engine = utraceattachtask, UTRACEATTACHCREATE | UTRACEATTACHEXCLUSIVE |...

CVE-2002-2365

Technical details about CVE-2002-2365 are not publicly available in the provided documents. No affected products, versions, or fixes are disclosed here; monitor for updates.

Adobe Photoshop PNG file handling buffer overflow

Added: 05/17/2007 CVE: CVE-2007-2365 BID: 23698 OSVDB: 35465 Background Adobe Photoshop is an application for editing digital images. Problem A buffer overflow vulnerability in Adobe Photoshop allows command execution when a user opens a specially crafted PNG image file. Resolution Do not open PN...

CVE-2007-2365

CVE-2007-2365 affects Adobe Photoshop CS2/CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9. It is a buffer overflow in PNG handling that allows an attacker to execute arbitrary code via a crafted PNG file. The vulnerability is user-assisted (requires opening a crafted image), with a CVS...

CVE-2006-2365

The CVE-2006-2365 entry describes a Cross-site Scripting (XSS) vulnerability in Vizra, specifically in the a_login.php script, exploitable via the message parameter. Affected component: Vizra web interface; vulnerable function/file: a_login.php. Underlying impact per NVD CVSS v2: partial confiden...

Debian DSA-853-1 : ethereal - several vulnerabilities

Several security problems have been discovered in ethereal, a commonly used network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2360 Memory allocation errors in the LDAP dissector can cause a denial of service. - CAN-2005-2361...

[SECURITY] [DSA 853-1] New ethereal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 853-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...

DSA-853-1 ethereal - several

Bulletin has no description...

CVE-2004-2365

CVE-2004-2365 affects Windows XP and Windows Server 2003. The issue is a memory leak in the operating system that allows a local user to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount. The provided documents...

CVE-2005-2365

CVE-2005-2365 describes a vulnerability in Ethereal’s SMB dissector where a buffer overflow and null pointer dereferences can lead to denial of service. Affected are Ethereal releases from 0.9.0 through 0.10.11; exploitation could cause memory exhaustion or crash via unknown attack vectors. Remed...