880 matches found
Fedora Core 5 : openssl-0.9.8a-5.4 (2006-1004)
Thu Sep 28 2006 Tomas Mraz 0.9.8a-5.4 - fix CVE-2006-2937 - mishandled error on ASN.1 parsing 207276 - fix CVE-2006-2940 - parasitic public keys DoS 207274 - fix CVE-2006-3738 - buffer overflow in SSLgetsharedciphers 206940 - fix CVE-2006-4343 - sslv2 client DoS 206940 - Sat Sep 9 2006 Tomas Mraz...
Design/Logic Flaw
F5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client uses a single integer dword representation of an IP address "dotless IP address", which allows remote authenticated users to connect to the FirePass administrator console and certain other network...
CVE-2006-1941
CVE-2006-1941: Neon Responder 5.4 for LANsurveyor is affected. A crafted Clock Synchronisation packet can trigger an access violation, enabling remote attackers to cause a denial of service (partial availability impact). No remediation details are provided in the supplied documents.
Neon Responder 5.4 (Clock Synchronization) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ==================================================================== Neon Responder 5.4 Clock Synchronization Denial of Service Exploit ==================================================================== / Stefan Lochbihler/ include include...
Neon Responders 5.4 - Remote Clock Synchronization Denial of Service
Neon Responders 5.4 - Remote Clock Synchronization Denial of Service // source: https://www.securityfocus.com/bid/17569/info Neon Responders is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle malformed network packets. Thi...
PT-2006-1929 · Freebsd +1 · Openam +2
Name of the Vulnerable Software and Affected Versions: OpenSSH on FreeBSD versions 5.3 through 5.4 Description: The issue arises when OpenSSH on FreeBSD is used with OpenPAM and a forked child process terminates during PAM authentication. This allows remote attackers to cause a denial of service ...
Memory corruption
Selective Acknowledgement SACK in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service infinite loop...
CVE-2006-0433
Selective Acknowledgement SACK in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service infinite loop...
FreeBSD-SA-06:06.kmem
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:06.kmem Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure Category: core Module: kernel Announced: 2006-01-25 Credits: Xin LI, Karl...
FreeBSD (4.x , < 5.4) master.passwd Disclosure Exploit
Exploit for bsd platform in category local exploits ====================================================== FreeBSD 4.x , include include include include include include define BUFSIZ 4096 void dolisten int s,c; struct sockaddrin addr; struct sockaddrin cli; socklent clisize; char bufBUFSIZ; FILE...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (freebsd)
No description provided by source. !/bin/sh FreeBSD Qpopper poppassd latest version local r00t exploit by kcope tested on FreeBSD 5.4-RELEASE POPPASSDPATH=/usr/local/bin/poppassd HOOKLIB=libutil.so.4 echo "" echo "FreeBSD Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep ...
CVE-2002-2088
CVE-2002-2088 affects MOSIX Project clump/os 5.4, where a default VNC account is created without a password. This enables remote attackers to gain root access. The available documents corroborate the basic issue and impact (remote root access) but do not provide versioned patch information or exp...
CVE-2005-2019
CVE-2005-2019 affects FreeBSD 5.4+ ipfw when running on SMP or UP with PREEMPTION enabled. The issue is an insufficient lock around the tables lookup cache, so concurrent table lookups can corrupt cached results and cause some addresses to be matched incorrectly, potentially bypassing filtering r...
CVE-2005-1036
The CVE-2005-1036 issue affects FreeBSD/amd64 5.x up to 5.4 where the IO permission bitmap was not properly initialized, allowing unprivileged local users to bypass access restrictions and potentially cause denial of service, disclosure of sensitive information, or privilege escalation. Relevant ...
AWStats 5.x/6.x - 'Logfile' Remote Command Execution
source: https://www.securityfocus.com/bid/12572/info AWStats is reported prone to a remote arbitrary command-execution vulnerability. This issue occurs because the application fails to properly sanitize user-supplied data. Specifically, the user-specified 'logfile' URI parameter is supplied to th...
CVE-2002-0483
index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname...
CVE-2002-0483
CVE-2002-0483 affects PHP-Nuke versions 5.4 and earlier, where requesting index.php with the file parameter set to index.php can trigger an error message that leaks the web server’s physical pathname. This is a remote vulnerability that primarily exposes confidential information (the server path)...
[SECURITY] [DSA-007-1] insufficient protection for zope Image and File objects
Package : zope Problem type : insufficient protection Debian-specific: no A busy week for the Zope team: on Monday another security alert was released revealing a potential problem found by Peter Kelly. This problem involved incorrect protection of data updating for Image and File objects: any us...
CVE-2000-0267
Cisco Catalyst 5.4.x is affected by CVE-2000-0267, where a user can gain access to the privileged enable mode without a password. The issue is a local bypass of authentication to the enable shell, enabling partial to full privilege exposure as described (no explicit exploitation details in the do...
