93 matches found
SA-CONTRIB-2015-065 - Registration codes - Multiple vulnerabilities
Registration codes module allows new account registrations only for users who provide a valid registration code. The module was not properly sanitizing user supplied text in some pages, thereby exposing XSS vulnerabilities. Additionally, some URLs were not protected against CSRF, a malicious user...
ProFTPD "mod_sftp/mod_sftp_pam"整数溢出拒绝服务漏洞
CVE ID: CVE-2013-4359 ProFTPD是一个Unix平台上或是类Unix平台上（如Linux, FreeBSD等）的FTP服务器程序。 ProFTPD 1.3.4d及其他在函数 "sftpkbdintrecvresponse" contrib/modsftp/kbdint.c中存在整数溢出错误，远程攻击者通过发送特制的TCP报文，可耗尽内存资源。要利用此漏洞需要启用 "modsftp" 和 "modsftppam"模块 0 ProFTPD 1.3.4d 厂商补丁： ProFTPD Project ---------------...
Updated proftpd package fixes security vulnerability
A bug in ProFTPd's modsftp and modsftppam modules can be used to trigger a large heap allocation and exhaust all available system memory of the underlying operating system CVE-2013-4359...
MGASA-2013-0295 Updated proftpd package fixes security vulnerability
A bug in ProFTPd's modsftp and modsftppam modules can be used to trigger a large heap allocation and exhaust all available system memory of the underlying operating system CVE-2013-4359...
CVE-2013-4359
Integer overflow in kbdint.c in modsftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service memory consumption via a large response count value in an authentication request, which triggers a large memory allocation...
DEBIAN-CVE-2013-4359
Integer overflow in kbdint.c in modsftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service memory consumption via a large response count value in an authentication request, which triggers a large memory allocation...
CVE-2013-4359
ProFTPD 1.3.4d and 1.3.5r3 are affected by an integer overflow in kbdint.c (mod_sftp) that can be triggered by a large response count in an authentication request, causing memory exhaustion and a DoS. The issue is confirmed across multiple advisories; remediation guidance in connected documents r...
Debian DSA-2767-1 : proftpd-dfsg - denial of service
Kingcope discovered that the modsftp and modsftppam modules of proftpd, a powerful modular FTP/SFTP/FTPS server, are not properly validating input, before making pool allocations. An attacker can use this flaw to conduct denial of service attacks against the system running proftpd resource...
[SECURITY] [DSA 27671-1] proftpd-dfsg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2767-1 [email protected] http://www.debian.org/security/ Nico Golde September 29, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2767-1 (proftpd-dfsg - denial of service)
Kingcope discovered that the modsftp and modsftppam modules of proftpd, a powerful modular FTP/SFTP/FTPS server, are not properly validating input, before making pool allocations. An attacker can use this flaw to conduct denial of service attacks against the system running proftpd resource...
CVE-2012-4359
Summary (CVE-2012-4359): Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 fail to validate the return value of realloc, enabling a remote attacker to cause a denial of service (invalid 0x00 write) and daemon crash. This may occur via a port-46824 TCP packet cont...
CVE-2011-4359
CVE-2011-4359 is rejected/not used; reference CVE-2011-4343.
CVE-2010-4359
CVE-2010-4359 affects Jurpopage 0.2.0, with a vulnerability in the file index.php that allows remote attackers to inject SQL via the category parameter. The root cause is improper input handling leading to arbitrary SQL execution, as described in Red Hat/CVE and NVD records. The connected documen...
CVE-2010-4359
creationtimestamp| type| source ---|---|--- 2010-11-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15621...
CVE-2009-4359
The CVE refers to a Cross-site Scripting (XSS) vulnerability in folder.php of the SmartMedia 0.85 Beta module for XOOPS, exploitable via the categoryid parameter. The affected component is the SmartMedia 0.85 Beta XOOPS module; root cause is an XSS flaw that allows injecting arbitrary script/HTML...
CVE-2009-4359
Cross-site scripting XSS vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the categoryid parameter...
CVE-2009-4359
creationtimestamp| type| source ---|---|--- 2009-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33382...
openSUSE Security Update : lighttpd (lighttpd-309)
Various issues have been fixed in lighttpd. CVE-2008-4298, CVE-2008-4359 and CVE-2008-4360 have been assigned to thess issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-309. The...
Fedora Core 9 FEDORA-2008-11923 (lighttpd)
The remote host is missing an update to lighttpd announced via advisory FEDORA-2008-11923. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...