RHEL 7 : glibc (RHSA-2016:0176)

Updated glibc packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Scientific Linux Security Update : glibc on SL7.x x86_64 (20160216)

A stack-based buffer overflow was found in the way the libresolv library performed dual A/AAAA DNS queries. A remote attacker could create a specially crafted DNS response which could cause libresolv to crash or, potentially, execute code with the permissions of the user running the library. Note...

Critical: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

glibc security update

2.17-106.0.1.4 - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. 2.17-106.4 - Revert problematic libresolv change, not needed for the CVE-2015-7547 fix...

CVE-2013-5229

CVE-2013-5229 concerns the Remote Desktop full-screen feature on Apple OS X versions earlier than 10.9 and Apple Remote Desktop older than 3.7. When waking from sleep during a live remote connection, the host dialog box text is sent to the connected remote host instead of the local machine, allow...

SOL15493 - OpenSSH vulnerability CVE-2006-5229

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

CVE-2011-5229

Summary of CVE-2011-5229 (appRain CMF): SQL injection in the Forum module’s quickstart/profile/index.php (PATH_INFO) of appRain CMF 0.1.5 can allow remote SQL commands execution. Affected product/version: appRain CMF

CVE-2011-5229

SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

CVE-2012-5229

CVE-2012-5229 concerns an XSS flaw in the WordPress plugin Slideshow Gallery2 (vulnerability in css/gallery-css.php via the border parameter). The issue allows remote attackers to inject arbitrary script/HTML in the context of the affected site. Multiple sources (NVD, CVE lists, Patchstack/WPVuln...

CVE-2010-5229

010 Editor is affected (versions 3.1.2 and earlier). It suffers an untrusted search path/LPE flaw: a malicious wintab32.dll in the current working directory can be loaded, enabling local privilege escalation via a DLL hijack. Root cause identified as DLL search order exploitation. Remediation per...

CVE-2012-5229

creationtimestamp| type| source ---|---|--- 2012-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36631...

SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure

The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...

KLA10043 LPE vulnerability in 010 Editor

An untrusted path vulnerability was found at 010 Editor. Malicious users can exploit this vulnerability to gain privileges via a DLL hijack. Original advisories Vulnerability description Release note Related products 010-Editor CVE list CVE-2010-5229 high Solution Update to latest version Impacts...

CVE-2008-5229

Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in the Network Configuration Operator group to gain privileges or cause a denial of service system crash via a large invalid PrefixLength to the...

CVE-2008-5229

The CVE-2008-5229 issue is a stack-based buffer overflow in Microsoft Device IO Control (iphlpapi.dll) affecting Windows Vista Gold and SP1. An attacker could cause a system crash or gain privileges by supplying a large invalid PrefixLength to CreateIpForwardEntry2 (e.g., via a route add). Affect...

CVE-2008-5229

creationtimestamp| type| source ---|---|--- 2008-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32590...

CVE-2008-1322

creationtimestamp| type| source ---|---|--- 2008-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5229...

CVE-2007-5229

The CVE-2007-5229 entry describes a CSRF vulnerability in the WordPress plugin FeedBurner FeedSmith 2.2 . The vulnerability allows remote attackers to modify plugin settings and hijack blog feeds by submitting malicious requests to wp-admin/options-general.php, which send parameters to FeedBurner...

CVE-2006-5229

OpenSSH portable 4.1 on SUSE Linux and possibly other platforms is affected by a timing-attack vulnerability (CVE-2006-5229) that lets remote attackers infer valid usernames based on response time differences. The issue, demonstrated by sshtime, is tied to how certain configurations and manually-...