754 matches found
[SECURITY] [DSA 2303-2] New linux-2.6 packages fix regression
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2303-2 [email protected] http://www.debian.org/security/ Dann Frazier September 10, 2011 http://www.debian.org/security/faq -...
ISC bind named DNS server DoS
Large RRSIG in negative response leads to assert...
PHP code execution vulnerability references summary-vulnerability warning-the black bar safety net
A code execution function In PHP you can execute the Code of the function. Such as eval , assert , theand system and exec and shellexec and passthru and escapeshellcmd and pcntlexec , etc. demo code 1.1: The second file contains the code injection The file containing the function in the specific...
Moderate: Red Hat Security Advisory: openldap security and bug fix update
Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Fedora 14 : dhcp-4.2.0-19.P2.fc14 (2011-0862)
A flaw was discovered in the way the dhcpd daemon processed a message for an address that had been previously declined and internally tagged as abandoned. Processing such a message could trigger an assert failure that could crash dhcpd if it was running as a DHCPv6 server. DHCPv4 servers are...
Google Chrome < 6.0.472.59 Multiple Vulnerabilities
Binary data 5664.pasl...
PHP code execution vulnerability summary-vulnerability warning-the black bar safety net
PHP security lovers of the feastthe Month of PHP Security it. Read php-security on many of the cattle below, to issue to the shared under a., are idols wow. A code to perform the function In PHP you can execute the Code of the function. Such as eval , assert , theand system and exec and shellexec...
Debian DSA-1847-1 : bind9 - improper assert
It was discovered that the BIND DNS server terminates when processing a specially crafted dynamic DNS update. This vulnerability affects all BIND servers which serve at least one DNS zone authoritatively, as a master, even if dynamic updates are not enabled. The default Debian configuration for...
AIX 5.3 TL 9 : bos.net.tcp.server (U825246)
The remote host is missing AIX PTF U825246, which is related to the security of the package bos.net.tcp.server. AIX 'named' is an implementation of BIND Berkeley Internet Name Domain providing server functionality for the Domain Name System DNS Protocol. AIX currently ships and supports three...
Wordpress Plugin WP-Syntax <= 0.9.1 Remote Command Execution
No description provided by source. ====================================================================== Wordpress plugin WP-Syntax = 0.9.1 Remote Code Execution ====================================================================== This vulnerability was originally discovered by Raz0r on...
WordPress WP-Syntax 0.9.1 Command Execution
====================================================================== Wordpress plugin WP-Syntax $functions if isnull$functions continue; foreach$functions as $function $string = calluserfuncarray$function, array$string; return $string; ... Global variable testfilter is not defined, so...
Fedora Core 10 FEDORA-2009-5284 (quagga)
The remote host is missing an update to quagga announced via advisory FEDORA-2009-5284. OpenVAS Vulnerability Test $Id: fcore20095284.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5284 quagga Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Fedora 10 : quagga-0.99.12-1.fc10 (2009-5284)
The latest upstream version fixes serious assert crashing with ASN4's. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 11 : quagga-0.99.12-1.fc11 (2009-5324)
The latest upstream version fixes serious assert crashing with ASN4's. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
DSA-1788-1 quagga - denial of service
Bulletin has no description...
quagga -- Denial of Service
Debian Security Team reports: It was discovered that Quagga, an IP routing daemon, could no longer process the Internet routing table due to broken handling of multiple 4-byte AS numbers in an AS path. If such a prefix is received, the BGP daemon crashes with an assert failure leading to a denial...
Debian DSA-1690-1 : avahi - assert errors
Two denial of service conditions were discovered in avahi, a Multicast DNS implementation. Huge Dias discovered that the avahi daemon aborts with an assert error if it encounters a UDP packet with source port 0 CVE-2008-5081 . It was discovered that the avahi daemon aborts with an assert error if...
KDE Konqueror字体颜色'断言'拒绝服务漏洞
BUGTRAQ ID: 31605 CNCAN ID：CNCAN-2008100805 Konqueror是一款桌面环境的文件管理器，也可用于浏览WEB。 Konqueror处理特殊构建的HMTL 'font'标签，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建特殊的WEB页，诱使Konqueror处理可导致应用程序崩溃。 KDE Konqueror 3.5.9 目前没有解决方案提供： http://www.konqueror.org/ perl -e 'print "html\n" . "font color=" . "A" x 500000 . "\n/html"'...