CVE-2009-4924

Dan Pascu python-cjson 1.0.5 does not properly handle a '/' argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting XSS attacks involving Firefox and the end tag of a SCRIPT element...

CVE-2009-4924

The provided connected documents confirm that CVE-2009-4924 affects python-cjson 1.0.5, where an improper handling of the '/' argument to cjson.encode can enable certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element. The vulnerability is described consis...

SLES9: Security update for OpenSSH

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openssh openssh-askpass For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 501950...

OpenH323 Opal SIP Protocol Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== OpenH323 Opal SIP Protocol Remote Denial of Service Exploit =========================================================== !/usr/bin/env python OpenH323 Opal SIP Protocol Remote Denial of...

CVE-2007-4924

creationtimestamp| type| source ---|---|--- 2009-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9240...

OpenH323 Opal SIP Protocol Remote Denial of Service Exploit

No description provided by source. !/usr/bin/env python OpenH323 Opal SIP Protocol Remote Denial of Service Vulnerability CVE-2007-4924 opal228dos.py by Jose Miguel Esparza 2007-10-08 S21sec labs import sys,socket if lensys.argv != 3: sys.exit"Usage: " + sys.argv0 + " targethost targetport\n"...

OpenH323 Opal SIP Denial Of Service

!/usr/bin/env python OpenH323 Opal SIP Protocol Remote Denial of Service Vulnerability CVE-2007-4924 opal228dos.py by Jose Miguel Esparza 2007-10-08 S21sec labs import sys,socket if lensys.argv != 3: sys.exit"Usage: " + sys.argv0 + " targethost targetport\n" target = sys.argv1 targetPort =...

OpenH323 Opal SIP Protocol - Remote Denial of Service

!/usr/bin/env python OpenH323 Opal SIP Protocol Remote Denial of Service Vulnerability CVE-2007-4924 opal228dos.py by Jose Miguel Esparza 2007-10-08 S21sec labs import sys,socket if lensys.argv != 3: sys.exit"Usage: " + sys.argv0 + " targethost targetport\n" target = sys.argv1 targetPort =...

CVE-2008-4924

CVE-2008-4924 : Multiple insecure method vulnerabilities in MW6 Technologies’ 1D Barcode ActiveX control (BARCODELib.MW6Barcode, Barcode.dll 3.0.0.1) allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods. The issue is trigg...

CVE-2008-4924

creationtimestamp| type| source ---|---|--- 2008-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6871...

Gentoo Security Advisory GLSA 200609-17 (openssh)

The remote host is missing updates announced in advisory GLSA 200609-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Security Advisory (FreeBSD-SA-06:22.openssh.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:22.openssh.asc ADV FreeBSD-SA-06:22.openssh.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

Debian Security Advisory DSA 1189-1 (openssh-krb5)

The remote host is missing an update to openssh-krb5 announced via advisory DSA 1189-1. Several remote vulnerabilities have been discovered in OpenSSH, a free implementation of the Secure Shell protocol, which may lead to denial of service and potentially the execution of arbitrary code. The Comm...

Debian: Security Advisory (DSA-1189-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1212-1 (openssh (1:3.8.1p1-8.sarge.6))

The remote host is missing an update to openssh 1:3.8.1p1-8.sarge.6 announced via advisory DSA 1212-1. Two denial of service vulnerabilities have been found in the OpenSSH server. CVE-2006-4924 The sshd support for ssh protcol version 1 does not properly handle duplicate incoming blocks. This cou...

SuSE 10 Security Update : opal (ZYPP Patch Number 4519)

A bug in the SIP protocol handler could be exploited by attackers to crash applications using opal. CVE-2007-4924 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : OpenSSH (ZYPP Patch Number 2184)

Several security problems were fixed in OpenSSH : - A denial of service problem has been fixed in OpenSSH which could be used to cause lots of CPU consumption on a remote openssh server. CVE-2006-4924 - If a remote attacker is able to inject network traffic this could be used to cause a client...

Ubuntu 5.04 / 5.10 / 6.06 LTS : openssh vulnerabilities (USN-355-1)

Tavis Ormandy discovered that the SSH daemon did not properly handle authentication packets with duplicated blocks. By sending specially crafted packets, a remote attacker could exploit this to cause the ssh daemon to drain all available CPU resources until the login grace time expired...

openSUSE 10 Security Update : opal (opal-4531)

A bug in the SIP protocol handler could be exploited by attackers to crash applications using opal CVE-2007-4924. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opal-4531. The text descriptio...

openSUSE 10 Security Update : openssh (openssh-2183)

Several security problems were fixed in OpenSSH : - CVE-2006-4924: A denial of service problem has been fixed in OpenSSH which could be used to cause lots of CPU consumption on a remote openssh server. - CVE-2006-4925: If a remote attacker is able to inject network traffic this could be used to...