143 matches found
Ubuntu 9.10 / 10.04 LTS / 10.10 : python-django vulnerabilities (USN-1040-1)
Adam Baldwin discovered that Django did not properly validate query string lookups. This could be exploited to provide an information leak to an attacker with admin privilieges. CVE-2010-4534 Paul McMillan discovered that Django did not validate the length of the token used when generating a...
Mongoose Web Server <= 2.8 Slash Character Remote File Disclosure Vulnerability
Mongoose Web Server is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
MS03-022 Microsoft IIS ISAPI nsiislog.dll ISAPI POST Overflow
This exploits a buffer overflow found in the nsiislog.dll ISAPI filter that comes with Windows Media Server. This module will also work against the 'patched' MS03-019 version. This vulnerability was addressed by MS03-022. This module requires Metasploit: https://metasploit.com/download Current...
Microsoft IIS - ISAPI 'nsiislog.dll' ISAPI POST Overflow (MS03-022) (Metasploit)
$Id: ms03022nsiislogpost.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2009-4535
The CVE affects the Mongoose Web Server (Cesanta Mongoose) ≤ 2.8.0. Affected component: the web server’s handling of URL paths; root cause is inadequate input sanitization, allowing a remote attacker to trigger a trailing slash request that discloses the server’s files (source code disclosure). I...
CVE-2009-4535
creationtimestamp| type| source ---|---|--- 2009-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9897 2010-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12309...
Cross site scripting
Cross-site scripting XSS vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 BetaRC 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject...
CVE-2008-4535
EC-CUBE has multiple cross-site scripting (XSS) vulnerabilities documented as CVE-2008-4535, CVE-2008-4536, and CVE-2008-4537. Affected versions span EC-CUBE Ver1 and Ver2 lineups (including Community Edition Nightly-Builds up to specified revisions and beta RCs). The descriptions indicate that r...
Debian: Security Advisory (DSA-1183-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1184-1 (kernel-source-2.6.8)
The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1184-1. For details, please visit the referenced security advisories. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a...
Debian Security Advisory DSA 1184-2 (kernel-source-2.6.8)
The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1184-2. For details on the issues addressed with the missing update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11842.nasl 6616 2017-07-07 12:10:49Z cfischer $...
Debian: Security Advisory (DSA-1184-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 7 : vavoom-1.24-3.fc7 (2007-1977)
Security update fixing various format strings vulnerabilities and a DOS vulnerability in the vavoom server, this fixes: CVE-2007-4533, CVE-2007-4534 & CVE-2007-4535. Also see bugzilla bug 256621. Note that Tenable Network Security has extracted the preceding description block directly from the...
CVE-2007-4535
CVE-2007-4535 affects Vavoom 1.24 and earlier. The vulnerability resides in the VStr::Resize function (str.cpp) under UDP handling, where a string with a negative NewLen value can trigger an assertion error, allowing remote attackers to cause a daemon crash (denial of service). Fedora advisories ...
[SECURITY] [DSA 1183-1] New Linux 2.4.27 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1183-1 [email protected] http://www.debian.org/security/ Dann Frazier September 25th, 2006 http://www.debian.org/security/faq -...
BELL-CVE-2006-4535 CVE-2006-4535 does not affect BellSoft software
Bulletin has no description...
CVE-2006-4535
CVE-2006-4535 describes a local denial-of-service in the Linux kernel SCTP implementation where a socket with a specific SO_LINGER value can crash the kernel. Affected are kernel versions 2.6.17.10, 2.6.17.11 and 2.6.18-rc5 (and older kernels backported CVE-2006-3745 patches). Public sources (Red...
USN-347-1: Linux kernel vulnerabilities
Sridhar Samudrala discovered a local Denial of Service vulnerability in the handling of SCTP sockets. By opening such a socket with a special SOLINGER value, a local attacker could exploit this to crash the kernel. CVE-2006-4535 Kirill Korotaev discovered that the ELF loader on the ia64 and sparc...
[Full-disclosure] [USN-347-1] Linux kernel vulnerabilities
=========================================================== Ubuntu Security Notice USN-347-1 September 18, 2006 linux-source-2.6.10/-2.6.12/-2.6.15 vulnerabilities CVE-2006-4535, CVE-2006-4538 =========================================================== A security issue affects the following Ubunt...