Debian DSA-3261-1 : libmodule-signature-perl - security update

Multiple vulnerabilities were discovered in libmodule-signature-perl, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-3406 John Lightsey discovered that Module::Signature could parse the unsigned...

Debian Security Advisory DSA 3261-1 (libmodule-signature-perl - security update)

Multiple vulnerabilities were discovered in libmodule-signature-perl, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-3406 John Lightsey discovered that Module::Signature could parse the unsigned portio...

USN-2607-1: Module::Signature vulnerabilities

John Lightsey discovered that Module::Signature incorrectly handled PGP signature boundaries. A remote attacker could use this issue to trick Module::Signature into parsing the unsigned portion of the SIGNATURE file as the signed portion. CVE-2015-3406 John Lightsey discovered that...

[USN-2607-1] Module::Signature vulnerabilities

========================================================================== Ubuntu Security Notice USN-2607-1 May 12, 2015 libmodule-signature-perl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...

CVE-2014-3407

CVE-2014-3407 affects Cisco ASA SSL VPN in Software 9.3(.2) and earlier, where improper memory block allocation during HTTP packet processing lets a remote, unauthenticated attacker send crafted HTTP requests to exhaust memory and cause a denial of service. The vulnerability is tied to Bug ID CSC...

Fedora Update for drupal7 FEDORA-2014-13030

Check the version of drupal7 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868440";...

IBM Lotus Domino iCalendar MAILTO Buffer Overflow

No description provided by source. $Id: dominoicalendarorganizer.rb 12236 2011-04-04 17:43:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing an...

CVE-2013-3407

The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664...

CVE-2013-3407

The CVE-2013-3407 issue affects Cisco Server Provisioner (SP) Web Interface for version 6.4.0 Patch 5-1301292331 and earlier. The vulnerability is an authentication bypass/information disclosure: the web interface allows remote attackers to access certain pages without authentication by direct re...

IBM Lotus Domino iCalendar - MAILTO Buffer Overflow (Metasploit)

$Id: dominoicalendarorganizer.rb 12236 2011-04-04 17:43:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Lotus Domino nrouter.exe iCalendar MAILTO buffer overflow

Added: 09/24/2010 CVE: CVE-2010-3407 BID: 43219 OSVDB: 68040 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow in the nrouter.exe service allows remote attackers to execute arbitrary commands by sending an iCalendar message...

Lotus Domino nrouter.exe iCalendar MAILTO buffer overflow

Added: 09/24/2010 CVE: CVE-2010-3407 BID: 43219 OSVDB: 68040 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow in the nrouter.exe service allows remote attackers to execute arbitrary commands by sending an iCalendar message...

DSquare Exploit Pack: D2SEC_LOTUSCAL

Name| d2seclotuscal ---|--- CVE| CVE-2010-3407 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability Notes|...

CVE-2010-3407

IBM Lotus Domino server vulnerability CVE-2010-3407 exploitable via a stack-based overflow in MailCheck821Address (nnotes.dll) inside nrouter.exe. Remote attacker can execute arbitrary code by sending a long e-mail address in an ORGANIZER:mailto header of an iCalendar invitation. Affected: Lotus ...

CVE-2010-3407

creationtimestamp| type| source ---|---|--- 2010-09-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15005 2011-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17151 2018-05-29 15:50:33+00:00| seen|...

IBM Lotus Domino iCalendar MAILTO Buffer Overflow

This module exploits a vulnerability found in IBM Lotus Domino iCalendar. By sending a long string of data as the "ORGANIZER;mailto" header, process "nRouter.exe" crashes due to a Cstrcpy routine in nnotes.dll, which allows remote attackers to gain arbitrary code execution. Note: In order to...

CVE-2009-3407

Mode C (Normal): The CVE-2009-3407 vulnerability affects Oracle Application Server Portal (Portal component) in 10.1.2.3 and 10.1.4.2. It is exploitable over HTTP by remote attackers without authentication, with a CVSS v2 base score of 4.3 (Network, Medium complexity, no auth, Partial integrity i...

Design/Logic Flaw

Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-3407...

CVE-2008-3407

phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a login=right cookie...

CVE-2008-3407

The CVE-2008-3407 entry concerns phpLinkat 0.1, where remote attackers can bypass authentication and access unspecified pages under admin/ by sending a login=right cookie. Public sources (NVD and related CVE records) confirm the vulnerability in phpLinkat 0.1, with a base CVSS score of 5.0 (Mediu...