Debian Security Advisory DSA 985-1 (libtasn1-2)

The remote host is missing an update to libtasn1-2 announced via advisory DSA 985-1. Evgeny Legerov discovered several out-of-bounds memory accesses in the DER decoding component component of the Tiny ASN.1 Library that allows attackers to crash the DER decoder and possibly execute arbitrary code...

Debian: Security Advisory (DSA-986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-985-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5146

Multiple PHP remote file inclusion vulnerabilities in dedi-group Der Dirigent 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the dedipath parameter to 1 inc.generatecode.php, 2 fnc.typeforms.php, or 3 fnc.type.php in backend/inc/, or 4 frontend.php or 5 backend.php in...

CVE-2007-5146

CVE-2007-5146 ffects dedi-group Der Dirigent 1.0. Multiple PHP remote file inclusion vulnerabilities allow remote attackers to execute arbitrary PHP code via a URL in the dedi_path parameter to: inc.generate_code.php, fnc.type_forms.php, fnc.type.php (backend/inc/), frontend.php or backend.php (p...

Unfixed XSS vulnerability at www.van-der-wal.be

Security researcher MaXWeL, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting www.van-der-wal.be, which at the time of submission ranked 6847721 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2007. It is...

security flaw

Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...

CVE-2006-5507

Multiple PHP remote file inclusion vulnerabilities in Der Dirigent DeDi 1.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfgdedidedipath parameter in 1 find.php, 2 insertline.php, 3 fullscreen.php, 4 changecase.php, 5 insertlink.php, 6 inserttable.php, 7...

CVE-2006-5507

Multiple PHP remote file inclusion vulnerabilities in Der Dirigent DeDi 1.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfgdedidedipath parameter in 1 find.php, 2 insertline.php, 3 fullscreen.php, 4 changecase.php, 5 insertlink.php, 6 inserttable.php, 7...

CVE-2006-5507

CVE-2006-5507 concerns multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3. The NVD entry describes that remote attackers can execute arbitrary PHP code by supplying a URL in the cfg_dedi[dedi_path] parameter across several backend scripts (find.php, insert_line.php, f...

CentOS 4 : gnutls (CESA-2006:0207)

Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The GNU TLS Library provides support for cryptographic algorithms and protocols such as TLS. GN...

[SECURITY] [DSA 986-1] New gnutls11 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 986-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2006 http://www.debian.org/security/faq -...

DSA-986-1 gnutls11 - buffer overflows

Bulletin has no description...

libtasn1 tiny ASN.1 library / GnuTLS TLS implementation multiple security issues

Out-of-bounds access and buffer overflows in DER decoding...

DSA-985-1 libtasn1-2 - buffer overflows

Bulletin has no description...

USN-251-1: libtasn vulnerability

Evgeny Legerov discovered a buffer overflow in the DER format decoding function of the libtasn library. This library is mainly used by the GNU TLS library; by sending a specially crafted X.509 certificate to a server which uses TLS encryption/authentication, a remote attacker could exploit this t...

GLSA-200602-08 : libtasn1, GNU TLS: Security flaw in DER decoding

The remote host is affected by the vulnerability described in GLSA-200602-08 libtasn1, GNU TLS: Security flaw in DER decoding Evgeny Legerov has reported a flaw in the DER decoding routines provided by libtasn1, which could cause an out of bounds access to occur. Impact : A remote attacker could...

libtasn1, GNU TLS: Security flaw in DER decoding

Background Libtasn1 is a library used to parse ASN.1 Abstract Syntax Notation One objects, and perform DER Distinguished Encoding Rules decoding. Libtasn1 is included with the GNU TLS library, which is used by applications to provide a cryptographically secure communications channel. Description...

Important: Red Hat Security Advisory: gnutls security update

Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The GNU TLS Library provides support for cryptographic algorithms and protocols such as TLS. GN...

Design/Logic Flaw

Tiny ASN.1 Library libtasn1 before 0.2.18, as used by 1 GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and 2 GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test...