Lucene search
+L

287 matches found

securityvulns
securityvulns
added 2010/04/16 12:0 a.m.74 views

Microsoft Windows ISATAP IPv6 address spoofing

Insufficient check for tunneling address...

6.4CVSS2.6AI score0.17452EPSS
SaveExploits1References1
seebug.org
seebug.org
added 2010/04/14 12:0 a.m.37 views

Microsoft Windows ISATAP组件IPv6地址欺骗漏洞(MS10-029)

BUGTRAQ ID: 39352 CVE ID: CVE-2010-0812 Microsoft Windows是微软发布的非常流行的操作系统。 由于Windows检查隧道传输的ISATAP报文中内部报文IPv6源址的方法,导致Windows IPv6栈存在欺骗漏洞。成功利用这个漏洞的攻击者可以扮演地址绕过边界或主机防火墙。此外,当目标计算机使用攻击者所指定的源IPv6地址回复消息的话,还可能泄露信息。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft...

6.4CVSS6.3AI score0.17452EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2009/06/30 12:0 a.m.33 views

IBM DB2 Multiple Vulnerabilities (Linux)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2multdosvulnlin01.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Multiple Vulnerabilities Linux Authors: Antu Sanadi Updated KB Name Antu Sanadi on 2009-12-21 Copyright:...

4.3CVSS9.4AI score0.01972EPSS
SaveExploits1References3
Prion
Prion
added 2009/06/03 9:0 p.m.34 views

Memory corruption

The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service memory corruption and application crash via an IPv6 address in the correlation token in the APPID string, as demonstrated by an APPID string sent by the third-party...

4.3CVSS7AI score0.01972EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2009/06/03 9:0 p.m.41 views

CVE-2009-1906

The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service memory corruption and application crash via an IPv6 address in the correlation token in the APPID string, as demonstrated by an APPID string sent by the third-party...

4.3CVSS6.5AI score0.01972EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2009/06/03 8:35 p.m.63 views

CVE-2009-1906

The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service memory corruption and application crash via an IPv6 address in the correlation token in the APPID string, as demonstrated by an APPID string sent by the third-party...

6.4AI score0.01972EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2009/04/22 12:0 a.m.30 views

IBM DB2 9.1 < Fix Pack 7 Multiple Vulnerabilities

According to its version, the IBM DB2 server running on the remote host is prior to 9.1 Fix Pack 7. It is, therefore, affected by multiple vulnerabilities : - In certain situations an INNER JOIN predicate is applied before the OUTER JOIN predicate, which could result in disclosure of sensitive...

5CVSS7.6AI score0.01972EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.25 views

Debian Security Advisory DSA 637-1 (exim-tls)

The remote host is missing an update to exim-tls announced via advisory DSA 637-1. OpenVAS Vulnerability Test $Id: deb6371.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 637-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

7.2CVSS0.8AI score0.02618EPSS
SaveExploits3
Oracle linux
Oracle linux
added 2007/10/31 12:0 a.m.60 views

Important: cups security and bug fix update

1.2.4-11.14.el51.1 - Applied patch to fix CVE-2007-4351 STR 2561, bug 353981. 1.2.4-11.14 - Applied patch to fix cupsd crash when failing to open a file: URI STR 2351, bug 250415. 1.2.4-11.13 - Moved LSPP security attributes check before job creation bug 231522. 1.2.4-11.12 - Moved LSPP access...

10CVSS0.3AI score0.08565EPSS
SaveExploits1
securityvulns
securityvulns
added 2007/01/03 12:0 a.m.35 views

Security Advisory 0604

Security Advisory 0604 Summary : Input Validation error in Teredo tunnel Date : 31 December 2006 Affected versions : Miredo 1.0.5 down to 0.9.8 ID : MTFL-SA-0604 Details Authentication of a Teredo bubble as part of UDP hope punching with HMAC-MD5-64 hashing is done improperly and can easily be...

0.2AI score
SaveExploits0
securityvulns
securityvulns
added 2006/07/03 12:0 a.m.56 views

Current Versions Release History

Current Versions Release History 5.1c2 30-Jun-06 Valid Core License Keys: issued between 01-Jun-2004 and 31-Oct-2004, or on or after 01-Jun-2005. Admin: Lawful Intercept for Signals is implemented. WSSP: now all string prefixes HTML, JAVASCRIPT, etc. support numeric data. XIMSS: the Signal...

7.9AI score
SaveExploits0
Cvelist
Cvelist
added 2005/11/16 9:17 p.m.21 views

CVE-2002-2198

Buffer overflow in ZMailer before 2.99.511 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname...

8AI score0.06242EPSS
SaveExploits0References3
CVE
CVE
added 2005/11/16 9:17 p.m.44 views

CVE-2002-2198

CVE-2002-2198 describes a buffer overflow in ZMailer prior to 2.99.51_1 that can be triggered during HELO processing from an IPv6 address, potentially allowing remote attackers to execute arbitrary code. The component affected is ZMailer; the root cause is a buffer overflow that occurs when handl...

10CVSS8.4AI score0.06242EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2005/05/02 4:0 a.m.17 views

CVE-2005-0021

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via 1 an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or 2 the -bh command line option or dnsdb PTR...

7.2CVSS7.7AI score0.02618EPSS
SaveExploits3References10
OSV
OSV
added 2005/05/02 4:0 a.m.13 views

CVE-2005-0021

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via 1 an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or 2 the -bh command line option or dnsdb PTR...

7.7AI score
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2005/02/14 12:0 a.m.45 views

GLSA-200501-23 : Exim: Two buffer overflows

The remote host is affected by the vulnerability described in GLSA-200501-23 Exim: Two buffer overflows Buffer overflows have been found in the hostaton function CAN-2005-0021 as well as in the spabase64tobits function CAN-2005-0022, which is part of the SPA authentication code. Impact : A local...

7.2CVSS6.2AI score0.02618EPSS
SaveExploits3References4
OSV
OSV
added 2005/01/13 12:0 a.m.20 views

DSA-637-1 exim-tls - buffer overflow

Bulletin has no description...

7.2CVSS6.3AI score0.02618EPSS
SaveExploits3
Debian
Debian
added 2005/01/12 7:47 a.m.51 views

[SECURITY] [DSA 635-1] New exim packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 635-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2005 http://www.debian.org/security/faq -...

7.2CVSS0.9AI score0.02618EPSS
SaveExploits3
OSV
OSV
added 2005/01/12 12:0 a.m.18 views

DSA-635-1 exim - buffer overflow

Bulletin has no description...

7.2CVSS6.3AI score0.02618EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2005/01/12 12:0 a.m.29 views

Debian DSA-635-1 : exim - buffer overflow

Philip Hazel announced a buffer overflow in the hostaton function in exim, the default mail-transport-agent in Debian, which can lead to the execution of arbitrary code via an illegal IPv6 address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

7.2CVSS6.2AI score0.02618EPSS
SaveExploits3References3
Rows per page
Query Builder