CVE-2009-2874

The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04 allows remote attackers to cause a denial of service process crash via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662...

CVE-2009-2874

The CVE-2009-2874 entry affects Cisco Unified Presence, specifically the TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4). The underlying issue is a DoS condition caused by a large number of TCP connections to ports 16200 and 22794, which can crash the Tim...

CVE-2009-3469

Cross-site scripting XSS vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2009-3469

CVE-2009-3469 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Connections 2.0.1, specifically in the component profiles/html/simpleSearch.do via the name parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The public descriptions consistently cit...

CVE-2009-3469

Cross-site scripting XSS vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Core FTP Server 1.0 build 304 DoS

No description provided by source. !/usr/bin/env python Core FTP Server 1.0, build 304 Remote Denial of Service Exploit Pre Auth Found By: DrIDE Tested On: Windows XPSP3 Download: http://www.coreftp.com/server/ Notes: This will cause CPU usage to go to 100% and prevent new connections Usage:...

SuSE9 Security Update : net-snmp (YOU Patch Number 12022)

This update of net-snmp fixes the following bugs : - Default and configurable maximum number of varbinds returnable to a GETBULK request. CVE-2007-5846 - Add option to ignore accepted connections. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell...

IBM Lotus Connections 2.0.1 - simpleSearch.do Cross-Site Scripting

IBM Lotus Connections 2.0.1 - simpleSearch.do Cross-Site Scripting source: https://www.securityfocus.com/bid/36513/info IBM Lotus Connections is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36513/info IBM Lotus Connections is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Microsoft Windows RDP DoS

Creating multiple RDP connection at the same time causes system to crash...

Design/Logic Flaw

Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service TCP outage via a series of TCP sessions that have pending data and a 1 small or 2 zero receive window size, and remain in the...

CVE-2009-1926

Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service TCP outage via a series of TCP sessions that have pending data and a 1 small or 2 zero receive window size, and remain in the...

Design/Logic Flaw

The Red Hat build script for the GNOME Display Manager GDM before 2.16.0-56 on Red Hat Enterprise Linux RHEL 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079...

CVE-2009-2697

The Red Hat build script for the GNOME Display Manager GDM before 2.16.0-56 on Red Hat Enterprise Linux RHEL 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079...

CVE-2009-2697

The Red Hat build script for the GNOME Display Manager GDM before 2.16.0-56 on Red Hat Enterprise Linux RHEL 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079...

CVE-2009-2697

The Red Hat build script for the GNOME Display Manager GDM before 2.16.0-56 on Red Hat Enterprise Linux RHEL 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079...

Google Chrome 'JavaScript' And 'HTTPS' Multiple Vulnerabilities - Aug09

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnaug09.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome 'JavaScript' And 'HTTPS' Multiple Vulnerabilities - Aug09 Authors: Sharath S Copyright: Copyrig...

Google Chrome 'JavaScript' And 'HTTPS' Multiple Vulnerabilities (Aug 2009)

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3026

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...