149 matches found
RHEL 4 : kernel (RHSA-2010:0020)
Updated kernel packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating system...
kernel: e1000e frame fragment issue
drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537...
Cross site scripting
Cross-site scripting XSS vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 BetaRC 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject...
CVE-2008-4537
CVE-2008-4537 is an XSS vulnerability reported in EC-CUBE across multiple editions (e.g., Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.1.1-beta and earlier, Community Edition 1.3.4 and earlier, and Nightly-Build r17336 and earlier). The vulner...
CVE-2007-4537
The CVE-2007-4537 entry documents a heap-based buffer overflow in the Huffman decompression algorithm used by Skulltag 0.97d-beta4.1 and earlier. The vulnerability allows remote attackers to execute arbitrary code via a crafted UDP packet. Affected component: Huffman decompression in Skulltag; ro...
CVE-2006-4537
NET$SESSIONCONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file...
CVE-2006-4537
NET$SESSIONCONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file...
CVE-2006-4537
In DECnet-Plus on OpenVMS ALPHA 7.3-2 and 8.2, the NET$SESSION_CONTROL.EXE component writes a password to an audit log file after a successful connection following a network breakin, allowing local users to read the file and obtain passwords. This is the stated vulnerability. Patches are availabl...