Fedora Update for quagga FEDORA-2011-13504

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : quagga-0.99.20-2.fc16 (2011-13492)

fixes CVE-2011-3323..7 update to latest upstream 0.99.20 fixes memory leak Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Fedora 14 : quagga-0.99.20-2.fc14 (2011-13499)

fixes CVE-2011-3323..7 update to latest upstream 0.99.20 fixes memory leak Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Fedora 15 : quagga-0.99.20-2.fc15 (2011-13504)

fixes CVE-2011-3323..7 update to latest upstream 0.99.20 fixes memory leak Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Debian Security Advisory DSA 2316-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 2316-1. OpenVAS Vulnerability Test $Id: deb23161.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2316-1 quagga Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2011-3323

CVE-2011-3323 affects Quagga’s OSPFv3 implementation (ospf6d) before 0.99.19. A Link State Update with an invalid IPv6 prefix length can cause out-of-bounds memory access and a daemon crash (DoS). Remediation per the connected docs is upgrade to Quagga 0.99.19 or newer; exploitation details are n...

[SECURITY] [DSA 2316-1] quagga security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2316-1 [email protected] http://www.debian.org/security/ Florian Weimer October 05, 2011 http://www.debian.org/security/faq -...

Multiple Quagga remote component vulnerabilities

Overview Quagga contains five remote component vulnerabilities due to issues when handling BGP, OSPF, and OSPFv3 packets. Description CERT-FI reports:Quagga is an open source routing software that can handle various routing protocols such as RIP, BGP and OSPF. Five vulnerabilities have been found...

openSUSE Security Update : kernel (openSUSE-SU-2010:0738-1)

The updated openSUSE 11.2 kernel fixes the following security bugs : CVE-2010-3310: Local users could corrupt kernel heap memory via ROSE sockets. CVE-2010-2962: Local users could write to any kernel memory location via the i915 GEM ioctl interface. Additionally the update restores the...

CVE-2010-3323

Splunk 4.0.0–4.1.4 is vulnerable to remote session hijacking; the root cause is exposure of the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter. Impact is disclosure of the session key and potential unauthorized access. No patch/version remediation details are provide...

CVE-2009-3323

BAROSmini 0.32.595 is affected by multiple PHP remote file inclusion (RFI) vulnerabilities that allow an attacker to execute arbitrary PHP code via URLs provided to baros_path (include/common_functions.php) and main_path (lib_users.php, lib_stats.php, lib_slots.php) under include/lib/. This yield...

CVE-2009-3323

creationtimestamp| type| source ---|---|--- 2009-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9724...

SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...

CVE-2007-3323

CVE-2007-3323 describes an SQL injection in Comersus Shop Cart 7.07, exploitable via the idProduct parameter to comersus_optReviewReadExec.asp. Remote attackers could execute arbitrary SQL commands; the description notes it may be the same issue as CVE-2005-2190. No remediation or version-specifi...

CVE-2006-3323

PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter. NOTE: the same vector can be used for cross-site scripting, but CVE analysis suggests that this is resultant from file inclusion of HTML or...

CVE-2006-3323

MF Piadas 1.0 is affected by a PHP remote file inclusion in admin/admin.php, exploitable via the page parameter to execute arbitrary code. The underlying issue is a file inclusion vulnerability (HTML/script vector noted as related by CVE analysis). Connected advisories also reference cross-site s...

Microsoft IIS 5.0 printer ISAPI extension buffer overflow

Added: 02/08/2006 CVE: CVE-2001-0241 BID: 2674 OSVDB: 3323 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem The ISAPI extension which handles requests for file names ending in .printer is affected by ...

Microsoft IIS 5.0 printer ISAPI extension buffer overflow

Added: 02/08/2006 CVE: CVE-2001-0241 BID: 2674 OSVDB: 3323 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem The ISAPI extension which handles requests for file names ending in .printer is affected by ...

Microsoft IIS 5.0 printer ISAPI extension buffer overflow

Added: 02/08/2006 CVE: CVE-2001-0241 BID: 2674 OSVDB: 3323 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem The ISAPI extension which handles requests for file names ending in .printer is affected by ...

[SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion

-------------------------------------------------------------------------- Debian Security Advisory DSA 910-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2005 http://www.debian.org/security/faq -...