CVE-2013-4436

The default configuration for salt-ssh in Salt aka SaltStack 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle MITM attack...

CVE-2013-4436

CVE-2013-4436 concerns SaltStack’s salt-ssh default configuration (Salt 0.17.0) that does not validate the SSH host key, enabling MITM-style impact. Multiple connected sources (GHSA-F22J-37JJ-CXW9, OSV, NVD variant) corroborate the MITM risk but do not provide exploit details. A remediation menti...

CVE-2012-4436

Buffer overflow in the runlastargs function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service client crash and possibly execute arbitrary code via many .fwknop.run arguments...

DEBIAN-CVE-2012-4436

Buffer overflow in the runlastargs function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service client crash and possibly execute arbitrary code via many .fwknop.run arguments...

CVE-2012-4436

The CVE-2012-4436 issue affects fwknop prior to version 2.0.3, where a buffer overflow in run_last_args (client/fwknop.c) can be triggered when processing --last. This flaw may allow local attackers to cause a denial of service (client crash) and potentially execute arbitrary code via many .fwkno...

CVE-2012-4436

Buffer overflow in the runlastargs function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service client crash and possibly execute arbitrary code via many .fwknop.run arguments...

CVE-2012-4436

Buffer overflow in the runlastargs function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service client crash and possibly execute arbitrary code via many .fwknop.run arguments...

CVE-2011-4436

Dell KACE K2000 System Deployment Appliance – the admin web interface is affected by multiple cross-site scripting (XSS) vulnerabilities, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The connected documents confirm the same CVE in NVD/Red Hat/Nessus entries, ...

CVE-2010-4436

CVE-2010-4436 affects Oracle Sun Management Center (SunMC) 4.0, with an information disclosure vulnerability related to the Web Console. The NVD entry describes an unspecified vulnerability that could affect confidentiality, using network access with low complexity and no authentication, resultin...

CVE-2009-4436

CVE-2009-4436 describes multiple SQL injection vulnerabilities in Active Web Software’s eWebquiz 8. Attackable vectors are the QuizID parameter passed to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp. The issue allows remote attackers to execute arbitrary SQL commands. These ...

CVE-2009-4436

creationtimestamp| type| source ---|---|--- 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10529...

CVE-2008-4436

SQL injection vulnerability in bblogplugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter...

CVE-2008-4436

creationtimestamp| type| source ---|---|--- 2008-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6233...

CVE-2007-4436

CVE-2007-4436 (Drupal Project/Project issue tracking modules) . The provided records confirm a permission- enforcement flaw in the Drupal Project module (versions before 5.x-1.0, 4.7.x-2.3/1.3) and the Project issue tracking module (before 5.x-1.0, 4.7.x-2.4/1.4). The root cause is improper permi...

[SECURITY] [DSA 1175-1] New isakmpd packages fix replay protection bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 1175-1 [email protected] http://www.debian.org/security/ Noah Meyerhans September 13th, 2006 http://www.debian.org/security/faq -...

CVE-2006-4436

isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations SA with a replay window of size 0 when isakmpd acts as a responder during SA negotiation, which allows remote attackers to replay IPSec packets and bypass the replay protection...

CVE-2005-4436

The CVE-2005-4436 entry concerns Extended Interior Gateway Routing Protocol (EIGRP) v1.2, implemented in Cisco IOS (post 12.3(2), 12.3(3)B, 12.3(2)T) and related products. A remote attacker can cause a denial-of-service by sending a spoofed neighbor announcement that uses (1) mismatched k values ...