openSUSE 10 Security Update : xine-lib (xine-lib-2989)

The DirectShow loader uses wrong parameters in the memcpy function call which leads to a buffer overflow. CVE-2007-1246 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...

CVE-2007-2989

CVE-2007-2989 affects the libike library in Sun Solaris 9 prior to 20070529. A logic error related to a specific pointer allows remote attackers to cause a denial of service by sending certain UDP packets with a source port different from 500, crashing the in.iked daemon. The issue overlaps with ...

CVE-2006-2989

ASP ListPics 4.3 and earlier contains a Cross-site scripting (XSS) flaw in listpics.asp that can be exploited by supplying an info parameter value. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Affected component: listpics.asp in ASP ListPics 4.3 and earlier. R...

CVE-2005-2989

DeluxeBB 1.0 and 1.0.5 contain multiple SQL injection vulnerabilities exploitable via user-controlled parameters: tid in topic.php, uid in misc.php or pm.php, and fid in forums.php or newpost.php. These allow remote attackers to inject arbitrary SQL commands, as described in CVE-2005-2989. The ev...