78 matches found
CVE-2011-4112
CVE-2011-4112 affects the Linux kernel net subsystem prior to 3.1. The issue arises from improper restriction of the IFF_TX_SKB_SHARING flag, enabling local users with CAP_NET_ADMIN to access /proc/net/pktgen/pgctrl and, using the pktgen package with a bridge device for a VLAN interface, trigger ...
CVE-2010-4112
HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path...
CVE-2010-4112
CVE-2010-4112 affects HP Insight Management Agents prior to 8.6. The vulnerability enables remote disclosure of the full installation path via an unspecified request. HP and CVSS data indicate a base score of 5.0 (Medium) with network attack vector and no privileges required. Affected versions ar...
[security bulletin] HPSBMA02616 SSRT100231 rev.1 - HP Insight Management Agents Running on Linux and Windows, Remote Full Path Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02653973 Version: 1 HPSBMA02616 SSRT100231 rev.1 - HP Insight Management Agents Running on Linux and Windows, Remote Full Path Disclosure NOTICE: The information in this Security Bulletin should ...
[SECURITY] [DSA 1954-1] New cacti packages fix insufficient input sanitising
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1954-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...
CVE-2009-4112
CVE-2009-4112 affects Cacti up to version 0.8.7e, where remote authenticated administrators could escalate privileges by tampering with the Linux Get Memory Usage Data Input Method. OpenSUSE/SUSE updates (cacti, cacti-spine) to version 1.2.11 fix this and related issues (CVE-2018-20723/24/25/26, ...
CVE-2009-4112
creationtimestamp| type| source ---|---|--- 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33377...
CVE-2008-4112
This CVE-2008-4112 entry is rejected and not active; use CVE-2008-3195 instead.
CVE-2008-4112
creationtimestamp| type| source ---|---|--- 2008-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6269 2008-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6509...
Denial of service
The acceptconnections function in the virtual private network daemon vpnd in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service divide-by-zero error and daemon crash via a crafted load balancing packet to UDP port 4112...
CVE-2007-6276
The acceptconnections function in the virtual private network daemon vpnd in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service divide-by-zero error and daemon crash via a crafted load balancing packet to UDP port 4112...
CVE-2007-6276
The acceptconnections function in the virtual private network daemon vpnd in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service divide-by-zero error and daemon crash via a crafted load balancing packet to UDP port 4112...
CVE-2007-4112
CVE-2007-4112 affects Advanced Webhost Billing System (AWBS) prior to 2.6.0. When magic_quotes_gpc is disabled, multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The entry notes this can be leveraged for XSS attacks that bypas...
Ace-FTP Client 1.24a Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc =============================================== Ace-FTP Client 1.24a Remote Buffer Overflow PoC =============================================== !/usr/bin/python Credit to n00b for finding the bug. Ace-Ftp client buffer over flow p0c. This is...
Ruby on Rails fails to properly verify input passed via the URL
Overview Ruby on Rails fails to properly validate input. This may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Ruby on Rails is a web application programming framework. Ruby on Rails 1.1.4 and earlier contain a vulnerability in the processing of user input...
