51 matches found
Ubuntu 11.10 : linux vulnerability (USN-1275-1)
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit...
USN-1275-1: Linux kernel vulnerability
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit...
CVE-2010-4594
CVE-2010-4594 affects IBM Lotus Mobile Connect (Connection Manager) before 6.1.4 when HTTP Access Services is enabled. The vulnerability arises from improper handling of TCP connection requests, allowing remote attackers to trigger queue size delta errors that cause memory consumption and an HTTP...
CVE-2009-4594
Technical details for CVE-2009-4594 are not publicly available in the provided documents. Monitor for updates; the supplied data does not specify affected products, impact, exploitation, or remediation.
CVE-2008-4594
Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8361P-BEM1 chipset has unknown impact and attack vectors, probably remote...
CVE-2008-4594
Technical details for CVE-2008-4594 are not publicly available in the provided documents. The entries describe an unspecified SNMPv3 vulnerability with unknown impact; monitor for updates from official advisories.
CVE-2007-4594
Entrust Entelligence Security Provider (ESP) 8 is affected by improper certificate validation in certain path-validation scenarios: (1) a chain that omits the root CA, (2) applications ignoring unknown revocation statuses, and (3) certain certification path errors. This could allow context-depend...
CVE-2006-4594
Affected product/versions: PHP Advanced Transfer Manager (phpATM) 1.21 and earlier. Vulnerability: Multiple remote PHP file inclusion via the include_location parameter in (1) confirm.php and (2) login.php, allowing remote code execution. The index.php vector is already covered by CVE-2005-1681. ...
CVE-2005-4594
The CVE-2005-4594 entry concerns Stack-based buffer overflow in TUGZip 3.4.0.0, exploitable by processing an ARJ archive with a long filename. The underlying issue is a buffer overflow in filename handling, which could allow remote code execution. Affected product: TUGZip 3.4.0.0. Root cause: ins...