CVE-2011-4051

CVE-2011-4051 affects InduSoft Web Studio Remote Agent (CEServer component) and is due to lack of authentication for incoming requests, enabling unauthenticated remote code execution via file creation, DLL loading, and process control. Public sightings indicate exploit tooling and PoCs exist (e.g...

SOL12793 - GNU C Library vulnerability CVE-2010-4051

The regcomp implementation in the GNU C Library aka glibc or libc6 allows context-dependent attackers to cause a denial-of-service DoS attack. This applies to GNU C Library versions through 2.11.3, and also versions 2.12.x through 2.12.2. Information about this advisory is available at the...

CVE-2010-4051

The regcomp implementation in the GNU C Library aka glibc or libc6 through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service application crash via a regular expression containing adjacent bounded repetitions that bypass the intended REDUPMAX...

BELL-CVE-2010-4051 CVE-2010-4051 does not affect BellSoft software

Bulletin has no description...

CVE-2010-4051

The regcomp implementation in the GNU C Library aka glibc or libc6 through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service application crash via a regular expression containing adjacent bounded repetitions that bypass the intended REDUPMAX...

CVE-2010-4051

CVE-2010-4051 : The regcomp implementation in the GNU C Library (glibc/libc6) allows context-dependent attackers to cause a denial of service (application crash) via a regex containing adjacent bounded repetitions that bypass the RE_DUP_MAX limit. Affected versions include up to 2.11.3 and 2.12.x...

GNU libc/regcomp(3) Multiple Vulnerabilities

Exploit for linux platform in category dos / poc -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GNU libc/regcomp3 Multiple Vulnerabilities Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 01.10.2010 - - Pub.: 07.01.2011 CERT: VU912279 CVE: CVE-2010-4051...

GNU libc regcomp() stack exhaustion denial of service

Overview The regcomp function of GNU libc is susceptible to stack exhaustion which may result in a denial of service. Description It is possible to trigger deep recursion which results in stack exhaustion. An example trigger is: grep -E ".10,10,10,10,10," --- Impact An attacker may be able to...

CGI Generic Path Traversal (quick test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings and are affected by directory traversal or local files inclusion vulnerabilities. By leveraging this issue, an attacker may be able to read arbitrary files on the web server or execute commands. %NASLMINLEVEL...

CVE-2009-4051

Summary: CVE-2009-4051 affects Home FTP Server, specifically versions earlier than 1.10.3.144. The issue allows remote attackers to cause a denial of service (daemon outage) by sending multiple invalid SITE INDEX commands. The public metrics indicate a CVSS v2 base score of 5.0 (AV:N/AC:L/Au:N/C:...

CVE-2009-4051

creationtimestamp| type| source ---|---|--- 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9852...

CVE-2008-4051

CVE-2008-4051 describes a Cross-site scripting (XSS) vulnerability in Smart Survey 1.0, exposed via surveyresults.asp and the sid parameter. The vulnerability allows a remote attacker to inject arbitrary web script/HTML. Connected sources corroborate XSS in Smart Survey 1.0, but none provide publ...

CVE-2007-4051

CVE-2007-4051: A heap-based buffer overflow in the FindFiles function of UltraDefrag 1.0.3 is capable of allowing local users to escalate privileges by supplying a file with an excessively long pathname. The issue arises from improper handling of pathname length in the affected component, leading...

CVE-2006-4051

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2006-4051

The CVE-2006-4051 entry describes a PHP remote file inclusion in Turnkey Web Tools PHP Live Helper (versions 2.0 and earlier) where the abs_path parameter is not properly sanitized, allowing an attacker to supply a URL and execute arbitrary PHP code on the affected server. Connected advisories an...