88 matches found
BELL-CVE-2008-4445 CVE-2008-4445 does not affect BellSoft software
Bulletin has no description...
CVE-2008-4445
The sctpauthepsethmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTPAUTHHMACIDMAX, which...
CVE-2008-4445
CVE-2008-4445 affects the Linux kernel SCTP implementation prior to 2.6.26.4. The vulnerability resides in sctp_auth_ep_set_hmacs (net/sctp/auth.c) where the identifier index is not validated against SCTP_AUTH_HMAC_ID_MAX when SCTP-AUTH is enabled. This can allow local users to obtain sensitive i...
CVE-2007-4445
CVE-2007-4445 affects Image Space rFactor 1.250 and earlier. The vulnerability allows remote attackers to cause a denial of service via crafted UDP/UDP-like packets: (1) ID 0x30, (2) ID 0x38, and an invalid 13-bit integer in (3) ID 0x60 and (4) ID 0x68 packets, leading to a daemon crash; and a se...
Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3)
No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: issue might overlap...
CVE-2006-4445
CVE-2006-4445 affects CuteNews 1.3.x. The vulnerability is described as PHP remote file inclusion via the cutepath parameter in show_news.php or search.php, potentially allowing remote code execution. Some sources note that CVE analysis as of 2006-08-29 did not identify concrete scenarios causing...
CVE-2005-4445
CVE-2005-4445 affects Pegasus Mail client versions 4.21a–4.21c and 4.30PB1. An off-by-one error in email header processing causes a one-byte buffer overflow , enabling remote attackers to execute arbitrary code by sending a crafted long header. Exploitation is remote; no authentication is indicat...