[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-10.fc8

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

Debian Security Advisory DSA 1544-1 (pdns-recursor)

The remote host is missing an update to pdns-recursor announced via advisory DSA 1544-1. OpenVAS Vulnerability Test $Id: deb15441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1544-1 pdns-recursor Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

Debian Security Advisory DSA 1544-1 (pdns-recursor)

The remote host is missing an update to pdns-recursor announced via advisory DSA 1544-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Debian DSA-1544-2 : pdns-recursor - design flaw

Amit Klein discovered that pdns-recursor, a caching DNS resolver, uses a weak random number generator to create DNS transaction IDs and UDP source port numbers. As a result, cache poisoning attacks were simplified. CVE-2008-1637 and CVE-2008-3217 %NASLMINLEVEL 70300 C Tenable Network Security, In...

cdnetworks-exec.txt

Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5 AA07EBD2-EBDD-4BD6-9F8F-114BD513492C Solution: Upgrad...

CDNetworks Nefficient Download (NeffyLauncher.dll) Code Execution Vuln

No description provided by source. Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5...

PowerDNS DNS cache poisoning attack

Weak PRNG generator allows cache poisoning attack...

powerdns-recursor -- DNS cache poisoning

If the system random number generator can be predicted by its past output, then an attacker may spoof Recursor to accept mallicious data. This leads to DNS cache poisoning and client redirection...

win32 Download and Execute Shellcode Generator (browsers edition)

Exploit for win32 platform in category shellcode ================================================================= win32 Download and Execute Shellcode Generator browsers edition ================================================================= !/usr/bin/perl $loadingurl=$ARGV0; chomp $loadingurl...

Cross site scripting

Cross-site scripting XSS vulnerability in setpermissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1212

Cross-site scripting XSS vulnerability in setpermissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1212

The CVE-2008-1212 entry describes a Cross‑Site Scripting (XSS) vulnerability in Podcast Generator 0.96.2, specifically in set_permissions.php where the scriptlang parameter can be exploited. The underlying issue is insufficient input sanitization, allowing remote attackers to inject arbitrary scr...

CVE-2008-1212

Cross-site scripting XSS vulnerability in setpermissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1212: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in setpermissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1168

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...

CVE-2008-1167

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...

CVE-2008-1168

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...

Stack overflow

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...

CVE-2008-1167

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...