CVE-2011-3268

Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483...

CVE-2011-3268

Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483...

CVE-2011-3268

Technical details about CVE-2011-3268 are not provided in the connected documents; only the initial description is available. Monitor for updates.

PHP 5.3 < 5.3.7 Multiple Vulnerabilities

According to its banner, the version of PHP 5.3.x running on the remote host is prior to 5.3.7. It is, therefore, affected by the following vulnerabilities : - A use-after-free vulnerability in substrreplace. CVE-2011-1148 - A stack-based buffer overflow in socketconnect. CVE-2011-1938 - A code...

CVE-2010-3268

Symantec Intel Alert Management System (AMS) remote DoS (CVE-2010-3268) affects hndlrsvc.exe/ prgxhndl.dll when parsing the CommandLine field in AMS requests. GetStringAMSHandler() forwards to AMSLIB.AMSGetPastParamList, which can crash the service by dereferencing an invalid memory read during C...

[CORE-2010-0728] Symantec Intel Handler Service Remote Denial-of-Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Symantec Intel Handler Service Remote DoS 1. Advisory Information Title: Symantec Intel Handler Service Remote DoS Advisory Id: CORE-2010-0728 Advisory URL:...

Symantec Intel Handler Service Remote DoS

Core Security - CoreLabsSymantec Intel Handler Service Remote DoS 1. Advisory Information Title: Symantec Intel Handler Service Remote DoS Advisory Id: CORE-2010-0728 Advisory URL: http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos Date published: 2010-12-13 Date of las...

Google Chrome 'KEYGEN' Element Denial Of Service Vulnerability

This host is installed with Google Chrome and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromekeygendosvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome 'KEYGEN' Element Denial Of Service Vulnerability Authors: Sharath S Copyright: Copyright...

CVE-2009-3268

Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3268

The provided connected data confirms CVE-2009-3268 affects Google Chrome 1.0.154.48 and earlier, and is a remote DoS vulnerability caused by processing an automatically submitted form containing a KEYGEN element (related to CVE-2009-1828). The OpenVAS entry mirrors this: a Chrome KEYGEN-based DoS...

CVE-2008-3268

Affected software: phpScheduleIt 1.2.0–1.2.9. vulnerability: when useLogonName is enabled, remote attackers with administrator email address knowledge can bypass restrictions and gain privileges via unspecified login-name related vectors. root cause/precise exploit details are not specified in th...

Microsoft Windows活动目录LDAP请求远程拒绝服务漏洞（MS08-035）

BUGTRAQ ID: 29584 CVECAN ID: CVE-2008-1445 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的活动目录组件没有正确地验证LDAP请求，如果远程攻击者向ADAM、活动目录或AD LDS服务器发送了特制的LDAP请求报文的话，就可能导致系统停止响应并自动重新启动。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2 Microsoft...

Novell Groupwise Windows客户端API非授权邮件访问漏洞

BUGTRAQ ID: 18716 CVECAN ID: CVE-2006-3268 Novell GroupWise是一款跨平台协作软件。 Novell GroupWise的客户端API实现上存在漏洞，攻击者可能利用漏洞绕过安全限制，访问某些非授权的邮件。 Novell Groupwise 7.x Novell Groupwise 6.x Novell Groupwise 5.x 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： GroupWise 6.5: Apply SP6 Client Update 1...

iDefense Security Advisory 07.17.07: IBM Tivoli Provisioning Manager for OS Deployment TFTP Blocksize DoS Vulnerability

IBM Tivoli Provisioning Manager for OS Deployment TFTP Blocksize DoS Vulnerability iDefense Security Advisory 07.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 17, 2007 I. BACKGROUND IBM Corp.'s Tivoli Provisioning Manager for OS Deployment is a network boot server that...

CVE-2007-3268

Summary (CVE-2007-3268) : IBM Tivoli Provisioning Manager for OS Deployment (5.1 before Fix Pack 3) is affected by a DoS in the TFTPD TFTP implementation. A malformed read request (RRQ) with an invalid blksize triggers an integer division by zero, causing rembo.exe to crash and multiple services ...

Novell GroupWise Windows Client Arbitrary Email Access

The remote host is running GroupWise, an enterprise-class collaboration application from Novell. The version of GroupWise installed on the remote host contains a flaw in the client API that may allow a user to bypass security controls and gain access to non-authorized email within the same...

CVE-2006-3268

CVE-2006-3268 describes a vulnerability in the Windows client API of Novell GroupWise (5.x–7) that may allow an attacker to bypass security controls and access non-authorized email within the same authenticated post office. According to Novell’s advisory, GroupWise 7 must be upgraded to SP1 and G...

Skype Technologies Multiple Buffer Overflows

Binary data 3268.prm...

CVE-2005-3268

yiff server yiff-server 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files...

CVE-2005-3268

CVE-2005-3268 concerns yiff server (yiff-server) 2.14.2 on Debian GNU/Linux. The vulnerability arises because the process runs as root and does not properly verify ownership of files it opens, enabling local users to read arbitrary files. The connected documents confirm the affected product/versi...