Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server

1. Advisory Information Title: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server Advisory ID: CORE-2009-0820 Advisory URL:http://www.coresecurity.com/core-labs/advisories/dnsmasq-vulnerabilities Date published: 2009-08-31 Date of last update: 2009-08-31 Vendors contacted: Simon...

dnsmasq security update

2.45-1.1.el5 - problems with strings when enabling tftp CVE-2009-2957 and CVE-2009-2957 - Resolves: rhbg519021...

RedHat Update for pidgin RHSA-2008:1023-01

Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2008:1023-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CentOS Update for finch CESA-2008:1023 centos4 x86_64

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2008:1023 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for finch CESA-2008:1023 centos4 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2008:1023 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problem: CVE-2008-2957, Debian Bug 488632 The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory...

[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problem: CVE-2008-2957, Debian Bug 488632 The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory...

CVE-2008-2957

The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory or disk consumption via a UDP packet that specifies an arbitrary URL...

CVE-2008-2957

CVE-2008-2957 affects Pidgin UPnP handling: a malicious UPnP server could cause Pidgin to download excessive data via a UDP URL, leading to memory or disk exhaustion (DoS). The initial entry notes this could involve Pidgin 2.0.0 and potentially other versions. Connected documents corroborate the ...

[SECURITY] Fedora 8 Update: kernel-xen-2.6-2.6.21-2957.fc8

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

CVE-2007-2957

CVE-2007-2957 affects McAfee E-Business Server: integer overflow in authentication packet handling leads to a heap-based buffer overflow. Impact: remote code execution. Affected: Solaris < 8.5.3; Linux/HP-UX/AIX

Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow

====================================================================== Secunia Research 31/10/2007 - McAfee E-Business Server Auth Packet Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2006-2957

CVE-2006-2957 describes a cross-site scripting (XSS) vulnerability in i.List 1.5 beta and earlier. The issue arises in the add.php handler via the banurl parameter, allowing remote attackers to inject arbitrary web script or HTML. The connected sources confirm the affected product/version and the...

CVE-2005-2957

The CVE describes a stack-based buffer overflow in Avira Desktop for Windows (version 1.00.00.68) when using AVPACK32.DLL 6.31.0.3 during ACE archive scanning. A long filename inside an ACE archive can cause the overflow, allowing a remote attacker to execute arbitrary code on a vulnerable host. ...

CVE-2005-2957

Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive...