94 matches found
Debian Security Advisory DSA 1017-1 (kernel-source-2.6.8)
The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1017-1. OpenVAS Vulnerability Test $Id: deb10171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1017-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1017-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1018-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2004-2709
The vulnerability CVE-2004-2709 affects Gyach Enhanced (Gyach-E) before 1.0.4, where a buffer overflow in the strip_html_tags method can be triggered remotely via HTML tags, potentially causing a denial of service or arbitrary code execution. Exploitation vectors are not detailed in the provided ...
CVE-2007-2709
PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2005 2.00 allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathphysical parameter...
CVE-2007-2709
PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2005 2.00 allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathphysical parameter...
CVE-2007-2709
CVE-2007-2709 : A PHP remote file inclusion vulnerability affects NagiosQL 2005 2.00 in functions/prepend_adm.php, allowing an attacker to execute arbitrary PHP code via a URL supplied to SETS[path][physical]. This is a remote code execution flaw (impacting integrity and confidentiality, with pot...
Linux Kernel Sysctl接口注销本地拒绝服务漏洞
BUGTRAQ ID: 15365 CVECAN ID: CVE-2005-2709 Linux kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"sysctl.c"在"/proc/sys/net/ipv4/conf/"中处理接口注销时存在拒绝服务漏洞。恶意用户可以利用这个漏洞导致系统忙碌,造成服务不可用。 Linux kernel 2.6.14.1 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: Linux Upgrade linux-2.6.14.1.tar.bz2...
CVE-2006-2709
CVE-2006-2709 affects Secure Elements Class 5 AVR (aka C5 EVM ) before version 2.8.1. The issue: messages’ source address is not validated, enabling a remote attacker to execute arbitrary code on a client or forge messages to the server . The connected documents provide the product and impact det...
[SECURITY] [DSA 1018-2] New Linux kernel 2.4.27 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1018-2 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman April 5th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1018-1] New Linux kernel 2.4.27 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1018-1 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman March 26th, 2006 http://www.debian.org/security/faq -...
RHEL 3 : kernel (RHSA-2006:0140)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
CVE-2005-2709
The CVE-2005-2709 issue affects the Linux kernel's sysctl.c in kernels prior to 2.6.14.1. Local users could exploit a window created by opening an interface file under /proc/sys/net/ipv4/conf/, wait for the interface to unregister, then read/modify function pointers in memory used for the ctl_tab...
CVE-2004-2709
Buffer overflow in the striphtmltags method for Gyach Enhanced Gyach-E before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors involving HTML tags...