CVE-2009-2406

CVE-2009-2406 refers to a stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c of the Linux kernel before 2.6.30.4. The issue arises from not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size, enabling l...

CVE-2009-2406

Stack-based buffer overflow in the parsetag11packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving a crafted eCryptfs file, related to n...

[SECURITY] [DSA 1845-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1845-1 [email protected] http://www.debian.org/security/ dann frazier Jun 28, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1844-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1844-1 [email protected] http://www.debian.org/security/ Dann Frazier July 28, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1845-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Authorization Bypass Vulnerability

iDefense Security Advisory 06.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 03, 2008 I. BACKGROUND Sun Java System Active Server Pages is a multi-platform ASP application server. It provides provides ASP Active Server Pages functionality to a web server. More information is...

CVE-2008-2406

The administration application server in Sun Java Active Server Pages ASP Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102...

CVE-2008-2406

The CVE-2008-2406 issue affects Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The vulnerability allows remote attackers to bypass authentication by sending direct requests to the administration server, which listens on TCP port 5102, enabling unauthorized access to the administ...

CVE-2002-2406

CVE-2002-2406 affects LiteServe’s HTTP server (versions 2.0, 2.0.1, 2.0.2). The vulnerability is a buffer overflow in the HTTP server that can be triggered by a large number of percent characters (%) in an HTTP GET request, leading to a denial of service (hang). Documented impact is partial avail...

CVE-2007-2406

CVE-2007-2406 affects Apple Mac OS X 10.4.10 where Quartz Composer fails to initialize a certain object pointer, enabling user‑assisted remote execution of arbitrary code via a crafted Quartz Composer file. The vulnerability stems from an uninitialized object pointer in the Quartz Composer compon...

Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

CVE-2006-2406

CVE-2006-2406 affects Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions when register_globals is enabled. The vulnerability is a directory traversal in bb_lib/abbc.css.php that allows remote attackers to include arbitrary files via .. sequences and a trailing null byte (%00) in t...

CVE-2004-2406

CVE-2004-2406 – summary: The vulnerability concerns an overflow in the phpgw_config table within phpGroupWare, reported for versions before 0.9.14.002. The connected records confirm the component (phpGroupWare) and the affected version boundary (prior to 0.9.14.002), but neither the exact root ca...

CVE-2005-2406

CVE-2005-2406 affects Opera 8.01. The vulnerability allows remote attackers to perform cross-site scripting (XSS) or alter which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI. Root cause is input handling during file drag that leads to script execution. ...

CVE-2002-2406

Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service hang via a large number of percent characters % in an HTTP GET request...