CVE-2014-3506

d1both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service memory consumption via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values...

CVE-2014-3506

d1both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service memory consumption via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values...

CVE-2014-3506

OpenSSL DTLS vulnerability CVE-2014-3506 affects d1_both.c in the DTLS implementation. A remote attacker can cause a denial of service by sending crafted DTLS handshake messages that trigger large memory allocations. Affected versions are OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0...

openssl security update

CentOS Errata and Security Advisory CESA-2014:1053 Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Moderate: Red Hat Security Advisory: openssl security update

Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

Fedora 20 : openssl-1.0.1e-39.fc20 (2014-9308) (Heartbleed)

Multiple moderate issues fixed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Mandriva Linux Security Advisory : openssl (MDVSA-2014:158)

Multiple vulnerabilities has been discovered and corrected in openssl : A flaw in OBJobj2txt may cause pretty printing functions such as X509nameoneline, X509nameprintex et al. to leak some information from the stack. Applications may be affected if they echo pretty printing output to the attacke...

OpenSSL 1.0.0 < 1.0.0n Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.0n. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.0n advisory. - The ssl3sendclientkeyexchange function in s3clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i...

[DLA 33-1] openssl security update

Package : openssl Version : 0.9.8o-4squeeze17 CVE ID : CVE-2014-3505 CVE-2014-3506 CVE-2014-3507 CVE-2014-3508 CVE-2014-3510 Detailed descriptions of the vulnerabilities can be found at: https://www.openssl.org/news/secadv20140806.txt Its important that you upgrade the libssl0.9.8 package and not...

CVE-2014-3506

d1both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service memory consumption via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values...

[SECURITY] [DSA 2998-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2998-1 [email protected] http://www.debian.org/security/ Raphael Geissert August 07, 2014 http://www.debian.org/security/faq -...

CVE-2013-3506

GroundWork Monitor Enterprise 6.7.0 (Performance component: perfchart.cgi) is vulnerable to remote command execution via Server Side Includes (SSI). The flaw stems from not properly restricting XML content, allowing an attacker to craft a .shtml file and leverage SSI to run arbitrary commands. No...

CVE-2012-3506

Technical details for CVE-2012-3506 are not publicly available in the provided documents; no affected products, vectors, or fixes are disclosed. Monitor for updates.

CVE-2011-3506

CVE-2011-3506 is cited in RHSA-2012:1125 as a flaw in Oracle OpenSSO authentication/administration components. The Red Hat advisory states remote attackers could affect integrity/availability of a service using Oracle OpenSSO. The fix is included in Red Hat’s JBoss Enterprise SOA Platform 5.3.0, ...

CVE-2010-3506

CVE-2010-3506 affects Oracle Sun Product Suite 6.4 (Oracle Explorer/Sun Explorer). Described as an unspecified vulnerability that could affect confidentiality and integrity via unknown vectors for local users. CVSS v2 base score 3.0 (LOW), vector AV:L/AC:M/Au:S/C:P/I:P/A:N. The Initial Descriptio...

CVE-2010-3506

Unspecified vulnerability in the Oracle Explorer Sun Explorer component in Oracle Sun Products Suite 6.4 allows local users to affect confidentiality and integrity via unknown vectors...

CVE-2009-3506

CVE-2009-3506 involves multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21. The affected software is CMSphp 0.21, with XSS achievable through the cook_user parameter to index.php and the name parameter to modules.php. The available records describe the underlying issue as improper ...

CVE-2009-3506

creationtimestamp| type| source ---|---|--- 2009-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9311...

CVE-2008-3506

The CVE-2008-3506 entry concerns a SQL injection in PolyPager 1.0 rc2 and earlier, exploitable via the nr parameter of the default URI. The underlying issue is that user-controlled input may be unsafely integrated into SQL commands, allowing remote attackers to execute arbitrary SQL. Affected pro...

CVE-2007-3506

The ftbitmapassurebuffer function in src/base/ftbimap.c in FreeType 2.3.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors involving bitmap fonts, related to a "memory buffer overwrite bug."...