lighttpd -- multiple vulnerabilities

Lighttpd seurity annoucement: lighttpd 1.4.19, and possibly other versions before 1.5.0, does not decode the url before matching against rewrite and redirect patterns, which allows attackers to bypass rewrites rules. this can be a security problem in certain configurations if these rules are used...

IBM OS/400 BrSmRcvAndCheck()远程溢出漏洞

BUGTRAQ ID: 29660 IBM OS/400是IBM网络服务器上所运行的操作系统。 IBM OS/400在modem端口上执行诊断时，IBM OS/400中由BrSmIntWrap所调用的BrSmRcvAndCheck函数未经长度检查便执行了memcpy操作。如果远程攻击者提交了超长参数的话，就可能触发缓冲区溢出，导致初始程序加载（IPL）bootstrap进程终止。 IBM OS/400 V6R1M0 IBM OS/400 V5R4M5 IBM OS/400 V5R4M0 IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-2709

Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service task halt and main storage dump via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited...

Buffer overflow

Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service task halt and main storage dump via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited...

CVE-2008-2709

Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service task halt and main storage dump via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited...

CVE-2008-2709

The CVE-2008-2709 issue affects IBM OS/400 versions V5R4M0, V5R4M5, and V6R1M0 where the BrSmRcvAndCheck function in the RCHMGR module is vulnerable to a buffer overflow. This flaw could allow local users to trigger a denial of service (task halt and main storage dump) via unspecified vectors rel...

IBM OS/400 'BrSmRcvAndCheck()'缓冲区溢出漏洞

BUGTRAQ ID: 29660 IBM OS/400是一款AS/400机器上的操作系统。 IBM OS/400 'BrSmRcvAndCheck'存在缓冲区溢出，本地攻击者可以利用漏洞对服务进行拒绝服务攻击。 问题是由于memcpy时对长度缺少检查，攻击者可以利用此问题是IPL bootstrap进程停止。 IBM OS/400 V6R1M0 IBM OS/400 V5R4M5 IBM OS/400 V5R4M0 可参考如下安全公告获得补丁信息：...

CVE-2008-0694

Cross-site scripting XSS vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header...

Cross site scripting

Cross-site scripting XSS vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header...

CVE-2008-0694

The CVE-2008-0694 entry concerns IBM OS/400 HTTP Server (versions V5R3M0 and V5R4M0). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. Affected component is the HTTP Server handling Expect header...

CVE-2008-0694

Cross-site scripting XSS vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header...

Debian Security Advisory DSA 400-1 (omega-rpg)

The remote host is missing an update to omega-rpg announced via advisory DSA 400-1. OpenVAS Vulnerability Test $Id: deb4001.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 400-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-6114

Multiple buffer overflows in Wireshark formerly Ethereal 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 the SSL dissector or 2 the iSeries OS/400 Communication trace file parser...

CVE-2007-6114

CVE-2007-6114 affects Wireshark (formerly Ethereal) versions 0.99.0–0.99.6, with two vulnerable components: the SSL dissector and the iSeries (OS/400) Communication trace file parser. The issue is described as multiple buffer overflows that could be triggered by specially crafted network packets ...

Information disclosure

IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...

CVE-2007-3537

IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...

CVE-2007-3537

IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...

CVE-2007-3537

CVE-2007-3537 affects IBM OS/400 (i5/OS) on iSeries, specifically V4R2M0 through V5R3M0. The vulnerability arises because the system sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.

Design/Logic Flaw

Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to CVE-2004-0230, but this is not certain...

CVE-2007-0442

Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to CVE-2004-0230, but this is not certain...