100 matches found
[ MDVSA-2013:284 ] glibc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:284 http://www.mandriva.com/en/support/security/ Package : glibc Date : November 25, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in glibc: Integ...
Mandriva Linux Security Advisory : glibc (MDVSA-2013:283)
Updated glibc packages fixes the following security issues : Integer overflow in string/strcolll.c in the GNU C Library aka glibc or libc6 2.17 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a...
CVE-2013-4788
The PTRMANGLE implementation in the GNU C Library aka glibc or libc6 2.4, 2.17, and earlier, and Embedded GLIBC EGLIBC does not initialize the random value for the pointer guard, which makes it easier for context-dependent attackers to control execution flow by leveraging a buffer-overflow...
DEBIAN-CVE-2013-4788
The PTRMANGLE implementation in the GNU C Library aka glibc or libc6 2.4, 2.17, and earlier, and Embedded GLIBC EGLIBC does not initialize the random value for the pointer guard, which makes it easier for context-dependent attackers to control execution flow by leveraging a buffer-overflow...
CVE-2013-4788
CVE-2013-4788 affects glibc (GNU C Library) up to version 2.4/2.17 and EGLIBC; PTR_MANGLE does not initialize the random value for the pointer guard, enabling context-dependent attackers to influence control flow via a buffer-overflow in an application. Affected components: PTR_MANGLE implementat...
Fedora Update for glibc FEDORA-2013-17475
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 20 : glibc-2.18-9.fc20 (2013-17423)
Existing statically linked applications must be rebuilt to fix CVE-2013-4788. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
[security bulletin] HPSBST02735 SSRT100516 rev.1 - HP StorageWorks Modular Smart Array P2000 G3, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03153338 Version: 1 HPSBST02735 SSRT100516 rev.1 - HP StorageWorks Modular Smart Array P2000 G3, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be act...
ZDI-12-015 : (0Day) HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-015 : 0Day HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-12-015 January 12, 2012 - -- CVE ID: CVE-2011-4788 - -- CVSS: 9, AV:N/AC:L/Au:N/C:C/I:P/A:P - -- Affecte...
Design/Logic Flaw
HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than CVE-2011-4788...
CVE-2011-4788
CVE-2011-4788 is an absolute path traversal vulnerability in the web interface of HP StorageWorks P2000 G3 MSA array systems. The issue allows a remote attacker to read arbitrary files by supplying a pathname in the URI. Connected sources confirm impact on HP P2000 G3 MSA devices and identify the...
CVE-2010-4788
Affected: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (6.0.0.8-TIV-ITDS-IF0004). Root cause: insufficient locking of linked-list access during paged search. Impact: remote authenticated users can cause a denial of service (daemon crash). Remediation details are not provided in the conne...
CVE-2009-4788
CVE-2009-4788 concerns multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier . The issue allows remote attackers to redirect users to arbitrary sites and facilitate phishing via two vectors: the return parameter to pligg/login.php and the HTTP Referer header to user_settings.php . Thi...
Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
Pligg is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these issues to steal cookie-based authentication credentials or perform unauthorized actions when masquerading as the victim. Other attacks are also possible...
CVE-2008-4788
Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address bar, which allows remote attackers to spoof the address bar via a URL with a domain name that differs from an important domain name only in these characters, as demonstrated by using exam%A9ple.com to...
CVE-2008-4788
Microsoft Internet Explorer 6 is affected by CVE-2008-4788 due to a flaw in how the address bar renders URLs with high-bit characters. The vulnerability occurs when IE omits high-bit URL-encoded characters in the address bar, enabling remote attackers to spoof the address bar by using a domain na...
CVE-2007-4788
CVE-2007-4788 affects Cisco Content Switching Modules (CSM) 4.2 prior to 4.2.3a and Cisco Content Switching Module with SSL (CSM-S) 2.1 prior to 2.1.2a. The vulnerability allows remote attackers to cause a denial of service through sets of out-of-order TCP packets with unspecified characteristics...
CVE-2006-4788
Telekorn SignKorn Guestbook (SL) v1.3 and earlier is affected by CVE-2006-4788 (PHP remote file inclusion). The vulnerability occurs when register_globals is enabled and _SESSION[permission] = "yes", allowing an attacker to execute arbitrary PHP code via a URL in the dir_path parameter in include...
CVE-2005-4788
CVE-2005-4788 affects resmgr in SUSE Linux 9.2 and 9.3 (and possibly other distributions). The issue allows local users to bypass USB device access control via an alternate syntax for specifying USB devices. The connected sources (Red Hat, SUSE, NVD entries) confirm the description and scope but ...