20296 matches found
CVE-2012-5669
The bdfparseglyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read...
[SECURITY] [DSA 2612-1] ircd-ratbox security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2612-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 24, 2013 http://www.debian.org/security/faq -...
CVE-2012-5668
FreeType before 2.4.11 is affected by CVE-2012-5668 due to a NULL pointer dereference in bdf_free_font triggered by BDF font handling, leading to denial of service. Connected advisories confirm patches and vendor mitigations exist (e.g., updates addressing CVE-2012-5668 and related BDF fixes in 2...
CVE-2012-5669
CVE-2012-5669 affects the FreeType library: the function _bdf_parse_glyphs in FreeType before 2.4.11 can be triggered via BDF fonts, due to an incorrect calculation, causing an out-of-bounds read that may lead to denial of service (crash) and possibly arbitrary code execution. Connected advisorie...
CVE-2012-6442
CVE-2012-6442 is a Rockwell Automation EtherNet/IP vulnerability (improper access control) where a valid CIP message instructing a reset sent from an unauthorized/unintended source to ports 2222 or 44818 (TCP/UDP) can cause a denial of service, disrupting communication with connected devices. Aff...
CVE-2012-6437
Rockwell Automation CVE-2012-6437 affects numerous EtherNet/IP products and controllers (e.g., 1756-ENBT/EWEB, 1768-ENBT/EWEB, CompactLogix L32E/L35E, 1788-ENBT FLEXLogix, 1794-AENTR, MicroLogix 1100/1400, ControlLogix/GuardLogix/SoftLogix up to listed versions). Root cause: improper authenticati...
CVE-2012-6440 Rockwell Automation ControlLogix PLC Improper Input Validation
The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the product’s Web server to view and alter product configuration and diagnostics information. Rockwell...
CVE-2012-6436
CVE-2012-6436 is a buffer overflow vulnerability in Rockwell Automation EtherNet/IP products. The issue arises when the device processes malformed CIP packets sent to ports 2222 or 44818 (TCP/UDP), potentially causing CPU crash and loss of availability. Affected products include various Rockwell ...
CVE-2012-6440
CVE-2012-6440 affects Rockwell Automation EtherNet/IP products (e.g., 1756-ENBT/EWEB, 1768-ENBT/EWEB, CompactLogix L32E/L35E, 1788-ENBT, 1794-AENTR, MicroLogix 1100/1400, and pre‑20x controllers). The vulnerability arises from the Web server password authentication mechanism, enabling MitM and Re...
CVE-2012-5669
The bdfparseglyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read...
CVE-2012-5670
Summary (CVE-2012-5670): FreeType before 2.4.11 is vulnerable due to an error in the _bdf_parse_glyphs function and an ENCODING field with a negative value when processing BDF fonts. This can lead to an out-of-bounds write and crash (denial of service), with potential for broader impact described...
CVE-2012-6095
CVE-2012-6095 affects ProFTPD prior to 1.3.5rc1. When using the UserOwner directive, a race condition with a symlink attack on the MKD or XMKD commands lets a local user modify ownership of arbitrary files. The vulnerability arises from insecure handling of temporary files during directory creati...
CVE-2012-6438 Rockwell Automation ControlLogix PLC Improper Input Validation
The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the NIC to crash. Successful exploitation of this vulnerability could...
CVE-2012-6435
CVE-2012-6435 affects Rockwell Automation EtherNet/IP products (e.g., 1756-ENBT/ENBT, 1768-ENBT/EWEB, CompactLogix L32E/L35E, 1788-ENBT, 1794-AENTR, MicroLogix 1100/1400, and various ControlLogix/GuardLogix/SoftLogix platforms). The issue allows a CIP message from an unauthorized source to ports ...
CVE-2012-6438
CVE-2012-6438 is a vulnerability in Rockwell Automation EtherNet/IP devices where the NIC buffer may overflow when receiving malformed CIP packets. Affected components include 1756-ENBT/1768-ENBT/EWEB modules, CompactLogix L32E/L35E, 1788-ENBT FLEXLogix, 1794-AENTR, and various ControlLogix/Guard...
CVE-2012-6439
CVE-2012-6439 affects Rockwell Automation EtherNet/IP products (e.g., 1756-ENBT/EWEB; 1768-ENBT/EWEB; CompactLogix L32E/L35E; 1788-ENBT FLEXLogix; 1794-AENTR; and various ControlLogix/GuardLogix/SoftLogix/MicroLogix series). Root cause: improper access control for CIP messages that modify configu...
CVE-2012-6441
CVE-2012-6441 is an information-exposure vulnerability affecting Rockwell Automation EtherNet/IP products, including 1756-ENBT/1768-ENBT/1768-EWEB modules, CompactLogix/L18-L19 controllers, GuardLogix, SoftLogix, MicroLogix 1100/1400, and associated NICs and adapters. The issue arises when the de...
Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 update
JBoss Enterprise Application Platform 5.2.0, which fixes multiple security issues, various bugs, and adds several enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...
CVE-2012-6518
Cross-site request forgery CSRF vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module...