CVE-2013-2481

Integer signedness error in the dissectmountdirpathcall function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfsfilenamesnooping is enabled, allows remote attackers to cause a denial of service application crash via a...

CVE-2013-2481

Wireshark Mount dissector vulnerability CVE-2013-2481: in epan/dissectors/packet-mount.c, a signed integer length negative value (when nfs_file_name_snooping is enabled) can crash the application, affecting Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6. The issue is fixed in Wireshark rele...

Gentoo Security Advisory GLSA 201206-24 (apache tomcat)

The remote host is missing updates announced in advisory GLSA 201206-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian: Security Advisory (DSA-2481-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2481-1 : arpwatch - fails to drop supplementary groups

Steve Grubb from Red Hat discovered that a patch for arpwatch as shipped at least in Red Hat and Debian distributions in order to make it drop root privileges would fail to do so and instead add the root group to the list of the daemon uses. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Apache Tomcat信息泄露漏洞(CVE-2011-2481)

BUGTRAQ ID: 49147 CVE ID: CVE-2011-2481 Tomcat是由Apache软件基金会下属的Jakarta项目开发的一个Servlet容器，按照Sun Microsystems提供的技术规范，实现了对Servlet和JavaServer Page（JSP）的支持，并提供了作为Web服务器的一些特有功能. Tomcat在实现上存在本地信息泄露漏洞，本地攻击者可利用此漏洞泄露敏感信息。 此漏洞源于Jsvc库中的错误，没有解除应用程序访问超级用户拥有的文件和目录。 Apache Group Tomcat 厂商补丁： Apache Group ----------...

CVE-2011-2481

CVE-2011-2481 affects Apache Tomcat 7.0.x prior to 7.0.17. A crafted application loaded earlier than the target can replace the XML parser used by other web applications, allowing local users to read or modify (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications. This vuln...

CVE-2011-2481

Removed by vendor...

CentOS Update for libtiff CESA-2010:0519 centos5 i386

Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2010:0519 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fixed in Apache Tomcat 7.0.19

Low: Information disclosure CVE-2011-2526 Tomcat provides support for sendfile with the HTTP NIO and HTTP APR connectors. sendfile is used automatically for content served via the DefaultServlet and deployed web applications may use it directly via setting request attributes. These request...

RHEL 4 / 5 : libtiff (RHSA-2010:0519)

Updated libtiff packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

libtiff security update

CentOS Errata and Security Advisory CESA-2010:0519 Updated libtiff packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...

RedHat Update for libtiff RHSA-2010:0519-01

Check for the Version of libtiff OpenVAS Vulnerability Test RedHat Update for libtiff RHSA-2010:0519-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for libtiff RHSA-2010:0519-01

Check for the Version of libtiff OpenVAS Vulnerability Test RedHat Update for libtiff RHSA-2010:0519-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Important: Red Hat Security Advisory: libtiff security update

Updated libtiff packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2010-2481

The CVE refers to LibTIFF, where the TIFFExtractData macro (in LibTIFF versions prior to 3.9.4) mishandles unknown tag types in TIFF directory entries, enabling a remote attacker to trigger an out-of-bounds read and cause an application crash. Concrete mention appears in MiracleLinux AXSA-2010-37...

CVE-2009-2481

mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and 1 send e-mail to arbitrary addresses or 2 obtain sensitive information via unspecified vectors...

CVE-2009-2481

mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and 1 send e-mail to arbitrary addresses or 2 obtain sensitive information via unspecified vectors...

CVE-2009-2481

Summary: CVE-2009-2481 affects Movable Type prior to 4.261. When global templates are not initialized, mt-wizard.cgi allows remote bypass of access restrictions, enabling (1) sending email to arbitrary addresses and (2) obtaining sensitive information via unspecified vectors. Affected software: M...

CVE-2008-2481

CVE-2008-2481 affects phpRaider 1.0.7 and 1.0.7a. The issue is a PHP remote file inclusion in authentication/phpbb3/phpbb3.functions.php that is exploitable when register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying a URL in the pConfig_auth[phpbb_path] para...