72 matches found
openSUSE Security Update : krb5 (krb5-1795)
Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer overflow leads to heap memory corruption CVE-2009-4212. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
Fedora Update for krb5 FEDORA-2009-13539
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2009-3295
The prepreprocessreq function in kdc/dotgsreq.c in the cross-realm referral implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 before 1.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a ticket request...
CVE-2009-3295
CVE-2009-3295 : In MIT Kerberos 5, the prep_reprocess_req function in kdc/do_tgs_req.c of the cross-realm referral KDC allows remote attackers to trigger a NULL pointer dereference, causing a denial of service (daemon crash). Affected: MIT Kerberos 5 up to version 1.7.x prior to 1.7.1. Root cause...
MITKRB5-SA-2009-003 [CVE-2009-3295] KDC denial of service in cross-realm referral processing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2009-003 MIT krb5 Security Advisory 2009-003 Original release: 2009-12-28 Last update: 2009-12-28 Topic: KDC denial of service in cross-realm referral processing CVE-2009-3295 KDC denial of service in cross-realm referral processing CVSSv2...
CVE-2008-3295
CVE-2008-3295 describes a cross-site scripting (XSS) vulnerability in XOOPS 2.0.18.1, specifically in modules/system/admin.php, where an attacker can inject arbitrary script or HTML through the fct parameter. The vulnerability is documented across multiple sources (NVD, CVE listings, and related ...
CVE-2008-3295
creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32098...
CVE-2007-3295
YaBB 2.1 and earlier suffer a directory traversal vulnerability where remote authenticated users can execute arbitrary Perl code by manipulating the userlanguage profile setting; the userlanguage key is propagated to language variables across multiple YaBB scripts (HelpCentre.pl, ICQPager.pl, Sub...
CVE-2006-3295
Open Guestbook 0.5 is affected by a cross-site scripting (XSS) vulnerability in header.php, exploitable via the title parameter to inject arbitrary script/HTML. The issue is associated with the header.php file in Open Guestbook 0.5, enabling remote attackers to inject script or HTML through the t...
Macromedia Flash < 2.0 Malformed RTMP Data DoS
Binary data 3295.prm...
CVE-2005-3295
CVE-2005-3295 affects HP-UX B.11.23 on Itanium platforms. The vulnerability is a local denial of service caused by an issue related to the handling of a specific stack size in HP-UX. Exploitation details are not provided in the documents; no active exploit information is stated. Remediation in th...
