88 matches found
CVE-2014-4099
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
CVE-2013-4099
CVE-2013-4099 covers multiple unspecified vulnerabilities in OpenAL32.dll in JOAL 2.0-rc11 (as used in JOGAMP) that allow context-dependent attackers to execute arbitrary code via crafted parameters to a long list of AL functions (e.g., alBuffer3f1, alGenSources1, alGetProcAddress1, alSourceStop1...
openSUSE Security Update : libcap (openSUSE-SU-2011:1259-1)
capsh did not chdir'/' after calling chroot. Programs could therefore access the current directory outside of the chroot CVE-2011-4099. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : libcap (openSUSE-SU-2011:1259-1)
capsh did not chdir'/' after calling chroot. Programs could therefore access the current directory outside of the chroot CVE-2011-4099. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
CVE-2011-4099
The CVE-2011-4099 issue affects the capsh program in libcap prior to version 2.22, where the current working directory is not changed when --chroot is used, enabling local users to bypass chroot restrictions. Affected component: libcap (capsh utility). Root cause: chroot handling does not chdir t...
CVE-2012-4099
Cisco NX-OS BGP implementation vulnerability CVE-2012-4099 allows remote attackers to trigger a denial of service (BGP service reset and resync) by sending a malformed UPDATE message due to improper AS-path filtering (Bug CSCtn13065). Affected component is the BGP/AS-path processing in NX-OS; imp...
RedHat Update for libcap RHSA-2011:1694-03
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[ MDVSA-2011:185 ] libcap
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:185 http://www.mandriva.com/security/ Package : libcap Date : December 12, 2011 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected in libcap...
Mandriva Linux Security Advisory : libcap (MDVSA-2011:185)
A vulnerability has been discovered and corrected in libcap : capsh did not chdir/ after calling chroot. Programs could therefore access the current directory outside of the chroot CVE-2011-4099. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network...
SuSE 11.1 Security Update : libcap (SAT Patch Number 5380)
The following bug has been fixed : - capsh did not chdir'/' after calling chroot. Programs could therefore access the current directory outside of the chroot. CVE-2011-4099 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
RHEL 6 : libcap (RHSA-2011:1694)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1694 advisory. The libcap packages provide a library and tools for getting and setting POSIX capabilities. It was found that capsh did not change into the new root...
CVE-2010-4099
The CVE-2010-4099 issue affects NitroSecurity NitroView ESM 8.4.0a (ess.pm) when ESSPMDebug is enabled. It allows remote attackers to execute arbitrary commands by sending shell metacharacters in the Request parameter to ess. The vulnerability is triggered by improper handling of user-controlled ...
CVE-2010-4099
creationtimestamp| type| source ---|---|--- 2010-10-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34932...
CVE-2009-4099
The Joomla! GCalendar component (com_gcalendar) for Joomla! is affected by a SQL injection in the gcid parameter. Affected versions include GCalendar 1.1.2, 2.1.4, and possibly earlier. The root cause is improper sanitization of user-supplied input in the gcid value used to build SQL queries (mod...
CVE-2009-4099
creationtimestamp| type| source ---|---|--- 2009-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10232...
CVE-2008-4099
PyDNS aka python-dns before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447...
CVE-2008-4099
The CVE-2008-4099 entry concerns PyDNS (python-dns) in Debian GNU/Linux prior to 2.3.1-4, where DNS requests did not randomize source ports or transaction IDs. This omission facilitates spoofed DNS responses by remote attackers, representing a DNS cache-poisoning risk. Debian has updated the pack...
Debian: Security Advisory (DSA-1619-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1619-1 : python-dns - DNS response spoofing
Multiple weaknesses have been identified in PyDNS, a DNS client implementation for the Python language. Dan Kaminsky identified a practical vector of DNS response spoofing and cache poisoning, exploiting the limited entropy in a DNS transaction ID and lack of UDP source port randomization in many...