openSUSE Security Update : dnsmasq (openSUSE-2015-359)

The DNS server dnsmasq was updated to fix one security issue. The following vulnerability was fixed : - CVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service DoS or read heap memory, potentially disclosing information such as performed DNS queries or encryption...

Updated dnsmasq packages fix CVE-2015-3294

Updated dnsmasq packages fix security vulnerability: Dnsmasq could be made to crash or expose sensitive information if it received specially crafted network traffic CVE-2015-3294...

CVE-2015-3294

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

BELL-CVE-2015-3294 CVE-2015-3294 does not affect BellSoft software

Bulletin has no description...

CVE-2015-3294

CVE-2015-3294 affects dnsmasq prior to 2.73rc4. The vulnerability lies in the tcp_request path where the return value of setup_reply is not properly handled, enabling a remote attacker to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request....

[SECURITY] [DSA 3251-1] dnsmasq security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 05, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3251-1] dnsmasq security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 05, 2015 http://www.debian.org/security/faq -...

Dnsmasq 2.72 Unchecked returned value

"Dnsmasq 2.72 Unchecked returned value" Description ------------------------------------------------------------ Dnsmasq does not properly check the return value of the setupreply function called during a tcp connection by the tcprequest function. This return value is then used as a size argument...

TYPSoft FTP Server (v 1.10) RETR CMD Denial of Service

No description provided by source. !/usr/bin/python TYPSoft FTP Server v 1.10 RETR CMD Denial Of Service CVE-2005-3294 OSVDB 19992 12/23/2010 C Emanuele Gentili [email protected] Notes: I have wrote this exploit because the code published here 1 do not work correctly. 1...

CVE-2014-3294

Cisco WebEx Meeting Server is affected by CVE-2014-3294, a vulnerability where sensitive information is exposed in URLs due to improper URL content restrictions. An authenticated remote attacker can view the values in URLs, enabling access to sensitive data via web-server access logs, Referer log...

CVE-2013-3294

CVE-2013-3294 and CVE-2013-3295 affect Exponent CMS, with multiple vulnerabilities in 2.2.0 beta3 and earlier: CVE-2013-3294 is a SQL Injection in index.php via src and username parameters, exploitable remotely; CVE-2013-3295 is a PHP File Inclusion via install/popup.php?page parameter, enabling ...

Amazon Linux AMI : php-pecl-apc (ALAS-2012-96)

A cross-site scripting XSS flaw was found in the 'apc.php' script, which provides a detailed analysis of the internal workings of APC and is shipped as part of the APC extension documentation. A remote attacker could possibly use this flaw to conduct a cross-site scripting attack. CVE-2010-3294 C...

Multiple Vulnerabilities in Exponent CMS

Advisory ID: HTB23154 Product: Exponent CMS Vendor: Online Innovative Creations Vulnerable Versions: 2.2.0 beta 3 and probably prior Tested Version: 2.2.0 beta 3 Vendor Notification: April 24, 2013 Vendor Patch: May 3, 2013 Public Disclosure: May 15, 2013 Vulnerability Type: SQL Injection CWE-89,...

Exponent CMS 2.2.0 Beta 3 - Multiple Vulnerabilities

Exponent CMS 2.2.0 Beta 3 - Multiple Vulnerabilities Advisory ID: HTB23154 Product: Exponent CMS Vendor: Online Innovative Creations Vulnerable Versions: 2.2.0 beta 3 and probably prior Tested Version: 2.2.0 beta 3 Vendor Notification: April 24, 2013 Vendor Patch: May 3, 2013 Public Disclosure: M...

Exponent CMS 2.2.0 Beta 3 - Multiple Vulnerabilities

Advisory ID: HTB23154 Product: Exponent CMS Vendor: Online Innovative Creations Vulnerable Versions: 2.2.0 beta 3 and probably prior Tested Version: 2.2.0 beta 3 Vendor Notification: April 24, 2013 Vendor Patch: May 3, 2013 Public Disclosure: May 15, 2013 Vulnerability Type: SQL Injection CWE-89,...

Exponent CMS 2.2.0 Beta 3 LFI / SQL Injection Vulnerabilities

Exponent CMS version 2.2.0 beta 3 suffers from local file inclusion and remote SQL injection vulnerabilities. Product: Exponent CMS Vendor: Online Innovative Creations Vulnerable Versions: 2.2.0 beta 3 and probably prior Tested Version: 2.2.0 beta 3 Vendor Notification: April 24, 2013 Vendor Patc...

Exponent CMS 2.2.0 Beta 3 LFI / SQL Injection

Advisory ID: HTB23154 Product: Exponent CMS Vendor: Online Innovative Creations Vulnerable Versions: 2.2.0 beta 3 and probably prior Tested Version: 2.2.0 beta 3 Vendor Notification: April 24, 2013 Vendor Patch: May 3, 2013 Public Disclosure: May 15, 2013 Vulnerability Type: SQL Injection CWE-89,...

CVE-2012-3294

The CVE-2012-3294 entry affects IBM WebSphere MQ File Transfer Edition (Web Gateway) and WebSphere MQ - Managed File Transfer. The IBM Security Bulletin confirms CSRF vulnerabilities in the Web Gateway that could allow an authenticated user to perform actions (add user accounts, modify permission...

Scientific Linux Security Update : php-pecl-apc on SL6.x i386/x86_64 (20120620)

The php-pecl-apc packages contain APC Alternative PHP Cache, the framework for caching and optimization of intermediate PHP code. A cross-site scripting XSS flaw was found in the 'apc.php' script, which provides a detailed analysis of the internal workings of APC and is shipped as part of the APC...

CentOS 6 : php-pecl-apc (CESA-2012:0811)

Updated php-pecl-apc packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...