[SECURITY] [DSA 2375-1] krb5. krb5-appl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2375-1 [email protected] http://www.debian.org/security/ Florian Weimer December 26, 2011 http://www.debian.org/security/faq -...

CVE-2011-4862

creationtimestamp| type| source ---|---|--- 2011-12-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18280 2012-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18369 2012-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18368 2018-05-29...

FreeBSD 'telnetd'守护进程远程缓冲区溢出漏洞

Bugtraq ID: 51182 CVE ID：CVE-2011-4862 FreeBSD是一款基于BSD的操作系统。 FreeBSD Telnet协议有一个对数据流进行加密的机制但其加密性不强，不能在任何关键性安全应用上使用 当通过TELNET协议提供加密密钥时，在拷贝密钥到固定缓冲区时没有对其长度进行校验，可触发缓冲区溢出。能连接telnetd守护程序的攻击者可以以守护进程上下文执行任意代码 0 Freebsd 9.0-STABLE Freebsd 9.0-RELEASE Freebsd 9.0-RC3 Freebsd 9.0-RC1 Freebsd 8.2-STABLE...

[SECURITY] [DSA 2372-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2372-1 [email protected] http://www.debian.org/security/ Florian Weimer December 25, 2011 http://www.debian.org/security/faq -...

CVE-2011-4862

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

CVE-2011-4862

CVE-2011-4862 is a remote pre-authentication buffer overflow in the encryption handling of BSD telnetd: libtelnet/encrypt.c in telnetd on FreeBSD 7.3–9.0, krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, and GNU inetutils. The underlying bug allows arbitrary code execution by sending a lon...

CVE-2011-4862

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

VulnCheck KEV: CVE-2011-4862

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key,...

FreeBSD-SA-11:08.telnetd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:08.telnetd Security Advisory The FreeBSD Project Topic: telnetd code execution vulnerability Category: core Module: contrib Announced: 2011-12-23 Affects: All...

CVE-2010-4862

CVE-2010-4862 describes an SQL injection in the Joomla! extension JExtensions JE Directory (com_jedirectory) version 1.0, where an attacker can abuse the catid parameter in an item action to index.php to execute arbitrary SQL. The root cause is unsanitized SQL input in the affected component. Aff...

CVE-2010-4862

creationtimestamp| type| source ---|---|--- 2010-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15163...

CVE-2009-4862

CVE-2009-4862 describes multiple SQL injection vulnerabilities in Alwasel 1.5. The affected functionality is the id parameter passed to two scripts, show.php and xml.php, which allows remote attackers to execute arbitrary SQL commands. The provided connected documents do not specify affected vers...

CVE-2009-4862

creationtimestamp| type| source ---|---|--- 2009-08-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9384...

SuSE 10 Security Update : kdelibs3 (ZYPP Patch Number 4862)

This update is necessary to support the new FlashPlayer version, which required XEmbed support. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid30038;...

CVE-2007-4862

CVE-2007-4862 is a documented XSS vulnerability affecting SAXON 5.4 in admin/menu.php via config[news_url]. Exploitation requires register_globals On and magic_quotes_gpc Off; the NVD/NVD-derived reports list a Medium impact (I/P) and network access with no confidentiality or availability impact,...

CVE-2005-4862

The CVE-2005-4862 entry concerns XWiki 0.9.793, where the search functionality indexes cleartext user passwords. This concrete flaw permits remote attackers to obtain sensitive information by submitting a search string that matches a password. No exploitation details or remediation are provided i...