CVE-2008-6144

Multiple cross-site scripting XSS vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029...

CVE-2008-6144

CVE-2008-6144 (and related CVE-2008-3029) describe cross-site scripting (XSS) in the WEC Discussion Forum (wec_discussion) TYPO3 extension. Affected versions include 1.6.2 and earlier for TYPO3 (and 1.7.0 and earlier per the CVE-2008-6144 entry). The vulnerabilities allow remote attackers to inje...

Gentoo Security Advisory GLSA 200701-21 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 200701-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : Kerberos5 (ZYPP Patch Number 2440)

Bugs in the handling of pointers to uninitializes resp. already freed memory could potentially be abused by attackers to execute code. CVE-2006-6144 / CVE-2006-6143 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2007-6144

CVE-2007-6144 describes a heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control (pplayer.dll_1_work) used by Xunlei Thunder 5.7.4.401. An attacker can trigger arbitrary code execution by supplying a long string to the FlvPlayerUrl property. The vulnerability is tied to a heap overf...

openSUSE 10 Security Update : krb5 (krb5-2442)

Bugs in the handling of pointers to uninitializes resp. already freed memory could potentially be abused by attackers to execute code CVE-2006-6144, CVE-2006-6143. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SUSE-SA:2007:004: krb5

The remote host is missing the patch for the advisory SUSE-SA:2007:004 krb5. Various bugs in the Kerberos5 libraries and tools were fixed which could be used by remote attackers to crash and potentially execute code in kadmind. - CVE-2006-6144 / MITKRB5-SA-2006-002: the RPC library could call an...

Fedora Core 6 : krb5-1.5-13 (2007-033)

This update incorporates fixes for recently-announced bugs found in the kadmind daemon. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

CVE-2006-6144

CVE-2006-6144 concerns the GSS-API mechglue in MIT Kerberos 5. The vulnerability affects Kerberos 5 implementations using the mechglue abstraction (Kerberos 5 up to 1.5.1, as used by kadmind and other products that rely on the GSS-API library). The issue is that a remote attacker can trigger a de...

CVE-2006-6144

The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon kadmind and other products that use this library, allows remote attackers to cause a denial of service crash via unspecified vectors that cause mechglue to free...