100 matches found
CVE-2015-3409
Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module...
CVE-2015-3409
Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module...
CVE-2015-3409
Module::Signature prior to 0.75 is vulnerable to an untrusted search path, enabling local privilege escalation by placing a Trojan horse module in the current working directory. The issue stems from loading modules from relative paths in @INC during signature verification, leading to arbitrary co...
Debian DSA-3261-1 : libmodule-signature-perl - security update
Multiple vulnerabilities were discovered in libmodule-signature-perl, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-3406 John Lightsey discovered that Module::Signature could parse the unsigned...
Debian Security Advisory DSA 3261-1 (libmodule-signature-perl - security update)
Multiple vulnerabilities were discovered in libmodule-signature-perl, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-3406 John Lightsey discovered that Module::Signature could parse the unsigned portio...
USN-2607-1: Module::Signature vulnerabilities
John Lightsey discovered that Module::Signature incorrectly handled PGP signature boundaries. A remote attacker could use this issue to trick Module::Signature into parsing the unsigned portion of the SIGNATURE file as the signed portion. CVE-2015-3406 John Lightsey discovered that...
[USN-2607-1] Module::Signature vulnerabilities
========================================================================== Ubuntu Security Notice USN-2607-1 May 12, 2015 libmodule-signature-perl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...
CVE-2014-3409
Cisco IOS 12.2(33)SRE9a and earlier, and IOS XE 3.13S and earlier are affected by CVE-2014-3409 due to improper parsing in the Ethernet Connectivity Fault Management (CFM) handling feature. A remote, unauthenticated attacker can craft malformed CFM packets to trigger a denial-of-service, causing ...
CVE-2013-3409
The CVE-2013-3409 issue affects Cisco Prime Central for Hosted Collaboration Solution (HCS). It arises from plaintext credentials being written to temporary files due to inadequate permissions, enabling an authenticated, local attacker to read sensitive information. The risk is tied to local acce...
Fedora Update for ecryptfs-utils FEDORA-2012-11069
Check for the Version of ecryptfs-utils OpenVAS Vulnerability Test Fedora Update for ecryptfs-utils FEDORA-2012-11069 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
Fedora Update for ecryptfs-utils FEDORA-2012-11049
Check for the Version of ecryptfs-utils OpenVAS Vulnerability Test Fedora Update for ecryptfs-utils FEDORA-2012-11049 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
Scientific Linux Security Update : perl-Net-DNS on SL3.0.x, SL4.x, SL5.x i386/x86_64
A flaw was found in the way Net::DNS generated the ID field in a DNS query. This predictable ID field could be used by a remote attacker to return invalid DNS data. CVE-2007-3377 A denial of service flaw was found in the way Net::DNS parsed certain DNS requests. A malformed response to a DNS...
CVE-2009-3409
CVE-2009-3409 affects Oracle PeopleSoft Enterprise HCM (TAM), version 9.0 Bundle 10. The vulnerability (HTTP, Valid Session) can be exploited by remote authenticated users to impact confidentiality and integrity with Partial+ impact; CVSS base score 3.6 (LOW). Mitigation is to apply the Oracle Cr...
SLES9: Security update for perl-Net-DNS
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: perl-Net-DNS For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5016730 within th...
SuSE9 Security Update : perl-Net-DNS (YOU Patch Number 11702)
perl-Net-DNS uses sequential IDs for DNS lookups which could cause problems with some programs like spamassassin. It potentially also simplifies DNS spoofing attacks against perl-Net-DNS. CVE-2007-3377 Additionally, malformed compressed DNS packets could trigger an endless loop in perl-Net-DNS...
Mandriva Update for perl-Net-DNS MDKSA-2007:146 (perl-Net-DNS)
Check for the Version of perl-Net-DNS OpenVAS Vulnerability Test Mandriva Update for perl-Net-DNS MDKSA-2007:146 perl-Net-DNS Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Ubuntu: Security Advisory (USN-483-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3409
The CVE-2008-3409 issue affects Unreal Tournament 3 (version 1.3beta4 and earlier). A buffer overflow in the UDP handling (ut3mendo.c, attack 1) can be triggered by a UDP packet containing a large value in a size field followed by a data string of that size, leading to memory corruption and a pot...
