6051 matches found
CVE-2006-4459: Undefined Security Weakness
Integer overflow in AnywhereUSB/5 1.80.00 allows local users to cause a denial of service crash via a 1 byte header size specified in the USB string descriptor...
CVE-2006-4459
Integer overflow in AnywhereUSB/5 1.80.00 allows local users to cause a denial of service crash via a 1 byte header size specified in the USB string descriptor...
security flaw
Integer overflow in the Binary File Descriptor BFD library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer...
CVE-2006-3418
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...
CVE-2006-3414
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution...
DEBIAN-CVE-2006-3418
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...
CVE-2006-3414
CVE-2006-3414 affects Tor prior to 0.1.1.20. The issue arises in server descriptors that use hostnames instead of IP addresses, enabling remote attackers to influence/address selectivity by providing preferential address resolution and thereby arbitrarily grouping users. The available connected d...
CVE-2006-3418
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...
CVE-2006-3418
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...
CVE-2006-3418
CVE-2006-3418 concerns Tor before 0.1.1.20, where the server descriptor fingerprint line is not validated against its identity key. This allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications. The connected documents corroborate the same descr...
Patching system services at runtime
Patching system services at runtime Although KAV appears to use a filesystem filter, the standard Windows mechanism for intercepting accesses to files specifically designed for applications like anti-virus software, the implementors also used a series of API-level function hooks to intercept...
CVE-2005-4752
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, are affected by CVE-2005-4752. The vulnerability allows local users to elevate privileges by abusing the run-as deployment descriptor element to change a web application or EJB from the Deployer security role t...
CVE-2005-4752
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain privileges by using the run-as deployment descriptor element to change the privileges of a web application or EJB from the Deployer security role to the Admin security role...
CVE-2005-4752: Undefined Security Weakness
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain privileges by using the run-as deployment descriptor element to change the privileges of a web application or EJB from the Deployer security role to the Admin security role...
CVE-2005-4744
Off-by-one error in the sqlerror function in sqlunixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single...
[SECURITY] [DSA 956-1] New lsh-utils packages fix local vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 956-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 956-1] New lsh-utils packages fix local vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 956-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2006 http://www.debian.org/security/faq -...
Design/Logic Flaw
BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors...
CVE-2006-0425
BEA WebLogic Portal 8.1 through SP4 is affected. The CVE describes a vulnerability that allows remote attackers to obtain the source for a deployment descriptor file. The underlying root cause and attack vectors are not specified in the provided documents. Public references consistently name BEA ...
