150 matches found
Critical: bind
Issue Overview: As reported upstream https://kb.isc.org/article/AA-01272/0, an error in the handling of TKEY queries can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit...
Security fix for the ALT Linux 8 package bind version 9.9.7-alt1
July 28, 2015 George V. Kouryachy 9.9.7-alt1 - Update to ftp://ftp.isc.org/isc/bind9/9.9.7-P1/bind-9.9.7-P1.tar.gz - CVE-2015-5477 fix...
Debian: Security Advisory (DSA-3319-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Critical DoS Bug in Node.js, io.js Patched
Developers at Node.js over the weekend released a critical update to the open source runtime environment that addresses a bug that could be used to cause denial of service attacks. The JavaScript framework is used in one way or another by a handful of companies, including Netflix, PayPal, the New...
CVE-2012-5477
The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors...
CVE-2012-5477
The CVE entry describes a vulnerability in the Foreman smart proxy prior to version 1.1 where a misconfigured umask of 0 enables local users to modify files created by the daemon via unspecified vectors. The issue can affect integrity and availability (I:P, A:P) with local attack vector and no au...
CVE-2007-5477
Cross-site scripting XSS vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter...
CVE-2007-5477
CVE-2007-5477 is a cross-site scripting (XSS) vulnerability in the auth.w component of the djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin. The issue allows remote attackers to inject arbitrary web script or HTML through the redir parameter. This is a user-facing web context vulnerable to...
CVE-2006-5477
Drupal 4.6.x (before 4.6.10) and 4.7.x (before 4.7.4) allow form submissions to be redirected via a crafted URL, which can disclose arbitrary form information to remote attackers. The description notes the vulnerable form handling and redirection, but no exploit details are provided in the connec...
