554 matches found
RHEL 5 : nspr and nss (RHSA-2009:1186)
Updated nspr and nss packages that fix security issues, bugs, and add an enhancement are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The packages with this update are identical to the packages...
RHEL 3 : seamonkey (RHSA-2009:1185)
Updated SeaMonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTM...
CentOS 3 : seamonkey (CESA-2009:1185)
Updated SeaMonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTM...
sagem-dos.txt
Sagem Router F@ST 2404 Remote Denial Of Service Exploit Discovery Date : 01/09/2008 !/usr/bin/bash Author : Underz0ne Crew Underz0ne.net Zigma Severity : Medium CVE : Not assigned Example : Zigma@Underz0ne ./sagem2404.sh 192.168.1.1 Sagem Router F@ST 2404 Remote Denial Of Service Exploit By...
iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Buffer Overflow Vulnerability
iDefense Security Advisory 06.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 03, 2008 I. BACKGROUND Sun Java System Active Server Pages is a multi-platform ASP application server. It provides provides ASP Active Server Pages functionality to a web server. More information is...
CVE-2008-2404
CVE-2008-2404 affects Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The issue is a stack-based buffer overflow in the request handling code that allows remote code execution via an unspecified string field. Exploitation is described as possible from the web context, with no aut...
CVE-2002-2404
The CVE-2002-2404 issue affects IISPop email server versions 1.161 and 1.181. The root cause is a buffer overflow in the POP3 handling logic that can be triggered by a long request to the POP3 port (TCP 110). This results in a remote denial of service (crash). The available documents do not provi...
CVE-2007-2404
CVE-2007-2404: CRLF injection vulnerability in CFNetwork on Mac OS X 10.3.9/10.4.10 prior to 20070731 allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting; note this can enable XSS. Affected component: CFNetwork. Root cause: CRLF sequence handling in HTTP r...
Mac OS X Multiple Vulnerabilities (Security Update 2007-007)
The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...
CVE-2006-2404
CVE-2006-2404 is a directory-traversal vulnerability in the RadScripts RadLance Gold 7.0 package, specifically in popup.php. The underlying issue allows an unauthenticated attacker to read arbitrary files by providing a ".." sequence in the read parameter, enabling unauthorized access to local fi...
CVE-2004-2404
CVE-2004-2404 is a duplicate of CVE-2004-2347. Connected records show that the affected product is Leif M. Wright Web Blog (versions 1.1 and 1.1.5). The vulnerability is remote command execution via shell metacharacters (e.g., |) in the file parameter of ViewFile requests, indicating improper han...
CVE-2005-2404
Sendcard 3.2.3 is affected: sendcard.php?id is vulnerable to SQL injection due to insufficient input sanitization. Remote attackers could execute arbitrary SQL commands, with CVSS base impact of Partial confidentiality, integrity, and availability (AV:N/AC:L/Au:N/C:P/I:P/A:P). This result is supp...
