[SECURITY] [DSA 3620-1] pidgin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3620-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2016 https://www.debian.org/security/faq -...

KLA10932 Multiple vulnerabilities in Pidgin

Multiple serious vulnerabilities have been found in Pidgin. Malicious users can exploit these vulnerabilities to overwrite arbitrary files, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A directory traversal vulnerability in the handling of...

CVE-2015-4323

Cisco NX-OS ARP DoS (CVE-2015-4323): Buffer overflow in ARP input handling caused by incorrect MTU validation on Nexus/NX-OS platforms (Nexus 1000V, Nexus 3000/4000, 7000/9000, MDS SAN-OS). An unauthenticated, adjacent attacker can send a crafted ARP packet to trigger a denial of service (device ...

CVE-2014-4323

The CVE-2014-4323 issue affects the Linux kernel 3.x MDP display driver (mdp_lut_hw_update in drivers/video/msm/mdp.c) used in Qualcomm QuIC Android MSM contributions. The vulnerability stems from insufficient validation of certain start and length values in an ioctl call, enabling privilege esca...

CVE-2011-4323

CVE-2011-4323 is a duplicate of CVE-2011-2726 (Drupal 7.x before 7.5). The connected data confirms an access bypass: non-privileged users can download a file attached to a comment if they know or guess the direct URL, even when the parent node is denied access, provided file upload fields or priv...

CVE-2011-4323

...

Novell ZENworks Configuration Management TFTPD Heap Buffer Overflow (CVE-2010-4323)

Novell ZENworks Configuration Management is an IT desktop computer management suite that is based on a client/server architecture. A management server collects and sends data of managed assets by communicating with client applications installed on computers, or via other management protocols. A...

ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability

ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-089 February 17, 2011 -- CVE ID: CVE-2010-4323 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Zenworks -- TippingPointTM IPS...

CVE-2010-4323

This CVE concerns the Novell Zenworks Configuration Manager TFTPD daemon (novell-tftp.exe). A heap-based buffer overflow in TFTPD’s request parsing allows remote code execution via crafted UDP requests sent to port 69. The vulnerability affects ZCM versions including 10.3.1, 10.3.2, 11.0 and earl...

CVE-2009-4323

The installation for Zen Cart stores sensitive information and insecure programs under the 1 docs, 2 extras, and 3 zcinstall folders, and 4 install.txt, which allows remote attackers to obtain sensitive information, delete the database, and conduct other attacks via a direct request, different...

CVE-2009-4323

The CVE-2009-4323 entry applies to Zen Cart installations where sensitive information and insecure programs are exposed under the docs, extras, and zc_install folders, plus install.txt. The Red Hat entry reiterates that remote attackers can obtain sensitive data, delete the database, and perform ...

CVE-2008-4323

CVE-2008-4323 affects Windows XP SP3: Windows Explorer may crash (DoS) when handling a specially crafted .ZIP file. The vulnerability is described as user-assisted (not remote) and affects Explorer functionality, with no details on a patch or workaround provided in the connected documents. No add...

CVE-2008-4323

creationtimestamp| type| source ---|---|--- 2008-09-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6616...

Gentoo Security Advisory GLSA 200710-14 (denyhosts)

The remote host is missing updates announced in advisory GLSA 200710-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-4323

CVE-2007-4323 affects DenyHosts 2.6 and is triggered by improper parsing of sshd log files, allowing a remote attacker to cause a denial of service by adding arbitrary IP addresses to /etc/hosts.deny through log content that includes an IP address string. The description does not specify a vendor...

CVE-2006-4323

CVE-2006-4323 involves an SQL injection in CityForFree’s indexcity 1.0 product, specifically the vulnerable script is list.php. The underlying issue occurs when magic_quotes_gpc is disabled, allowing an attacker to inject arbitrary SQL through the cate_id parameter. Connected documents corroborat...

CVE-2005-4323

CVE-2005-4323 describes an unspecified vulnerability in Hitachi Cosminexus Collaboration Portal (versions 06-00 through 06-10-/B), Groupmax Collaboration Portal (07-00 through 07-10-/B), and Groupmax Collaboration Web Client (07-00 through 07-10-/A) that allows remote attackers to cause a denial ...