Updated json-c packages fix security vulnerabilities

Updated json-c packages fix security vulnerabilities: Florian Weimer reported that the printbuf APIs used in the json-c library used ints for counting buffer lengths, which is inappropriate for 32bit architectures. These functions need to be changed to using sizet if possible for sizes, or to be...

CVE-2013-6371

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service CPU consumption via crafted JSON data, involving collisions...

CVE-2012-6371

The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading broadcast packets, a different vulnerability than CVE-2012-4366...

CVE-2012-6371

CVE-2012-6371 affects Belkin wireless routers (notably N900 F9K1104v1; also related models listed in the sources) where the WPA2/WPS PIN and default WPA2-PSK passphrase are predictably derived from device MAC addresses. The underlying issue is a WPS PIN generation scheme based on 6 digits of the ...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2008-6371

Ocean12 Membership Manager Pro is affected by an SQL injection in login.asp triggered by the Username parameter. The vulnerability arises from insufficient sanitization of user-supplied data, enabling remote attackers to craft input that causes arbitrary SQL execution. This aligns with multiple r...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2007-6371

CVE-2007-6371 affects Nokia N95 with RM-159 firmware 12.0.013. A remote attacker can cause a denial of service by sending a SIP INVITE, followed by an immediate SIP CANCEL, then a second SIP INVITE in a different session. The connected documents do not specify a fix or patch version. No exploitat...

CVE-2006-6371

Cross-site scripting XSS vulnerability in pbguestbook.php in JAB Guest Book allows remote attackers to inject arbitrary web script or HTML via the author parameter...

CVE-2006-6371

Cross-site scripting XSS vulnerability in pbguestbook.php in JAB Guest Book allows remote attackers to inject arbitrary web script or HTML via the author parameter...

CVE-2006-6371

The CVE-2006-6371 entry documents a Cross-site scripting (XSS) vulnerability in JAB Guest Book’s pbguestbook.php, exploitable via the author parameter. Affected component: pbguestbook.php in the JAB Guest Book. Root cause: lack of proper input sanitization on the author field leading to script/HT...