SUSE SLED12 / SLES12 Security Update : libtasn1 (SUSE-SU-2018:0295-1)

This update for libtasn1 fixes one issue. This security issue was fixed : - CVE-2018-6003: Prevent a stack exhaustion in asn1decodesimpleber lib/decoding.c when decoding BER encoded structure allowed for DoS bsc1076832. Note that Tenable Network Security has extracted the preceding description...

SUSE-SU-2018:0295-1 Security update for libtasn1

This update for libtasn1 fixes one issue. This security issue was fixed: - CVE-2018-6003: Prevent a stack exhaustion in asn1decodesimpleber lib/decoding.c when decoding BER encoded structure allowed for DoS bsc1076832...

Fedora 27 : mingw-libtasn1 (2018-f8c54aeec4)

Fixes security issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

Ubuntu 14.04 LTS / 16.04 LTS : Libtasn1 vulnerabilities (USN-3547-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3547-1 advisory. It was discovered that Libtasn1 incorrectly handled certain files. If a user were tricked into opening a crafted file, an attacker could...

USN-3547-1: Libtasn1 vulnerabilities

It was discovered that Libtasn1 incorrectly handled certain files. If a user were tricked into opening a crafted file, an attacker could possibly use this to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2017-10790 It was discovered that Libtasn1...

Fedora 27 : libtasn1 (2018-da4263f065)

Update to 4.13 1535261 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

CVE-2018-6003

CVE-2018-6003 affects GNU Libtasn1 (libtasn1) with unlimited recursion in _asn1_decode_simple_ber in decoding.c, leading to stack exhaustion and DoS. Affected product: Cloud Pak for Security (CP4S) versions 1.8.1.0, 1.8.0.0, 1.7.2.0. Remediation: upgrade to CP4S 1.9.0.0. See remediation guidance ...

CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

CVE-2006-6003

...

CVE-2006-6003

CVE-2006-6003 is rejected/not used and does not represent an active vulnerability entry.

CVE-2014-6003

CVE-2014-6003 affects the Belas Frases de Amor (aka com.goodbarber.frasesdeamor) Android app 1. The vendor’s implementation does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The av...

SuSE 11.1 Security Update : LibreOffice (SAT Patch Number 6003)

The update fixes the following security issues : - 740453: Vulnerability in RDF handling. CVE-2012-0037 - 752595: overflow in jpeg handling CVE-2012-1149 This update also fixes the following non-security issues : Extras : - add SUSE color palette fate312645 Filters : - crash when loading embedded...

SuSE 10 Security Update : libpng (ZYPP Patch Number 6003)

A allocation mistake in libpng's pngread.c has been fixed. CVE-2009-0040 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41547;...

CVE-2008-6003

SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...

CVE-2008-6003

CVE-2008-6003 is an SQL injection vulnerability in AJ Auction Pro Platinum 2’s sellers_othersitem.php, exploitable via the seller_id parameter to allow remote attackers to execute arbitrary SQL commands. The NVD entry lists this as a NETWORK attack with HIGH impact on confidentiality and integrit...

CVE-2007-6003

CVE-2007-6003 affects the Thomson SpeedTouch 716 router with firmware 5.4.0.14, where a cross-site scripting (XSS) vulnerability exists in the CGI endpoint cgi/b/ic/connect. The underlying issue allows remote attackers to inject arbitrary web script or HTML via the url parameter. The NVD entry li...

Format string

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...

CVE-2007-5561

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...