Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : bind9 vulnerability (USN-1264-1)

It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Debian DSA-2347-1 : bind9 - improper assert

It was discovered that BIND, a DNS server, crashes while processing certain sequences of recursive DNS queries, leading to a denial of service. Authoritative-only server configurations are not affected by this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA 2347-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2347-1 [email protected] http://www.debian.org/security/ Florian Weimer November 16, 2011 http://www.debian.org/security/faq -...

CVE-2011-4456

CVE-2011-4313 affects ISC BIND 9.0.x–9.6.x, 9.4-ESV–9.4-ESV-R5, 9.6-ESV–9.6-ESV-R5, 9.7.0–9.7.4, 9.8.0–9.8.1, and 9.9.0a1–9.9.0b1. The root cause is the caching of an invalid DNS record in the resolver, which can be exploited remotely via recursive DNS queries to trigger an assertion failure and ...

CVE-2010-4313

CVE-2010-4313 concerns Orbis CMS 1.0.2 where the vulnerable script is fileman_file_upload.php. A flaw allows any authenticated user to upload a PHP file to the uploads/ directory and then access it via a direct URL, enabling remote code execution. The root cause is unrestricted file upload withou...

CentOS 5 : tog-pegasus (CESA-2008:1001)

Updated tog-pegasus packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM services...

CVE-2009-4313

ir3232.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service heap corruption or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file...

CVE-2009-4313

ir3232.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service heap corruption or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file...

CVE-2009-4313

The CVE-2009-4313 issue affects the Microsoft Windows Indeo32 codec (ir32_32.dll 3.24.15.3) in Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The underlying flaw is malformed data in a stream within media files (e.g., AVI), which can lead to heap corruption and allow remote code execution or ...

RedHat Update for tog-pegasus RHSA-2008:1001-01

Check for the Version of tog-pegasus OpenVAS Vulnerability Test RedHat Update for tog-pegasus RHSA-2008:1001-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CVE-2008-4313

CVE-2008-4313 concerns tog-pegasus (OpenPegasus WBEM) on OpenGroup Pegasus 2.7.0 where a Red Hat patch failed to properly configure the PAM tty name, enabling remote authenticated users to bypass access controls and issue requests to WBEM services. Connected advisories (RHSA-2008:1001; CentOS/CES...

tog security update

CentOS Errata and Security Advisory CESA-2008:1001 Updated tog-pegasus packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The tog-pegasus packages provide...

Important: Red Hat Security Advisory: tog-pegasus security update

Updated tog-pegasus packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM services...

RHEL 5 : tog-pegasus (RHSA-2008:1001)

Updated tog-pegasus packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM services...

Immunity Canvas: PBD_INCLUDE

Name| pbdinclude ---|--- CVE| CVE-2007-4313 Exploit Pack| CANVAS Description| Php Blue Dragon CMS Remote Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpbluedragon.pl CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4313 CVE Name: CVE-2007-4313...

CVE-2007-4313

Affected software : Php Blue Dragon CMS 3.0.0. Vulnerability : PHP remote file inclusion via the vsDragonRootPath parameter in public_includes/pub_blocks/activecontent.php, allowing remote code execution. Root cause : improper handling of a user-supplied URL leading to remote inclusion. Impact : ...

CVE-2006-4313

CVE-2006-4313 affects Cisco VPN Concentrator 3000 series (pre-4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F). The vulnerability is an FTP management issue allowing unauthorized execution of FTP commands (CWD, MKD, CDUP, RNFR, SIZE, RMD) to modify files or create/delete directories via unknown...

CVE-2005-4313

CVE-2005-4313 concerns a SQL injection in the AlmondSoft Almond Personals 4.05 product. The vulnerability is in the file index.php and is exploitable by supplying an arbitrary value for the id parameter, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is described a...