SUSE SLES11 Security Update : libidn (SUSE-SU-2016:2291-1)

This update for libidn fixes the following issues : - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 ...

CVE-2016-6263

The CVE-2016-6263 entry affects the libidn library. The vulnerability lies in the stringprep_utf8_nfkc_normalize function (lib/nfkc.c) in libidn before 1.33, where crafted UTF-8 data can trigger an out-of-bounds read and crash, causing denial of service. Affected versions are prior to 1.33; the i...

CVE-2016-6263

The stringpreputf8nfkcnormalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via crafted UTF-8 data...

SUSE SLED12 / SLES12 Security Update : libidn (SUSE-SU-2016:2079-1)

This update for libidn fixes the following issues : - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 ...

[SECURITY] [DSA 3658-1] libidn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3658-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 01, 2016 https://www.debian.org/security/faq -...

Ubuntu 14.04 LTS / 16.04 LTS : Libidn vulnerabilities (USN-3068-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3068-1 advisory. Thijs Alkemade, Gustavo Grieco, Daniel Stenberg, and Nikos Mavrogiannopoulos discovered that Libidn incorrectly handled invalid UTF-8...

SUSE-SU-2016:2079-1 Security update for libidn

This update for libidn fixes the following issues: - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 -...

Debian DLA-582-1 : libidn security update

Multiple vulnerabilities have been discovered in libidn. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-8948 When idn is reading one zero byte as input an out-of-bounds-read occurred. CVE-2016-6261 An out-of-bounds stack read is exploitable in...

Fedora Update for libidn FEDORA-2016-42514bee97

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libidn packages fix security vulnerability

Out-of-bounds stack read in libidn before 1.33 in idnatoascii4i CVE-2016-6261. Out-of-bounds-read in libidn when reading one zero byte as input CVE-2015-8948, CVE-2016-6262. In libidn before 1.33, stringpreputf8nfkcnormalize would crash when presented with invalid UTF-8 CVE-2016-6263...

MGASA-2016-0269 Updated libidn packages fix security vulnerability

Out-of-bounds stack read in libidn before 1.33 in idnatoascii4i CVE-2016-6261. Out-of-bounds-read in libidn when reading one zero byte as input CVE-2015-8948, CVE-2016-6262. In libidn before 1.33, stringpreputf8nfkcnormalize would crash when presented with invalid UTF-8 CVE-2016-6263...

Fedora 24 : libidn (2016-42514bee97)

Security fix for CVE-2016-6263, CVE-2015-8948, CVE-2016-6262, CVE-2016-6261 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2008-6263

CVE-2008-6263 affects SaturnCMS: a SQL injection vulnerability in lib/user/t_user.php, via the username parameter to the _userLoggedIn function. This allows remote attackers to execute arbitrary SQL commands. Exploit details and remediation are not provided in the supplied documents.

CVE-2008-6263

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7147...

Gentoo Security Advisory GLSA 200801-17 (netkit-ftpd)

The remote host is missing updates announced in advisory GLSA 200801-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[ GLSA 200801-17 ] Netkit FTP Server: Denial of Service

Gentoo Linux Security Advisory GLSA 200801-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Double free

Double free vulnerability in the getreply function in ftp.c in netkit ftp netkit-ftp 0.17 20040614 and later allows remote FTP servers to cause a denial of service application crash and possibly have unspecified other impact via some types of FTP protocol behavior. NOTE: the netkit-ftpd issue is...

CVE-2007-5769

Double free vulnerability in the getreply function in ftp.c in netkit ftp netkit-ftp 0.17 20040614 and later allows remote FTP servers to cause a denial of service application crash and possibly have unspecified other impact via some types of FTP protocol behavior. NOTE: the netkit-ftpd issue is...

CVE-2007-6263

The dataconn function in ftpd.c in netkit ftpd netkit-ftpd 0.17, when certain modifications to support SSL have been introduced, calls fclose on an uninitialized file stream, which allows remote attackers to cause a denial of service daemon crash and possibly have unspecified other impact via som...

CVE-2007-6263

The CVE-2007-6263 issue affects netkit-ftpd 0.17 where, after modifications to support SSL, fclose is called on an uninitialized file stream in ftpd.c. This can trigger a denial of service (daemon crash) via certain FTP over SSL behaviors, demonstrated by breaking a passive FTP DATA connection th...