CVE-2008-0535

CVE-2008-0535 affects Cisco Service Control Engine (SCE) SSH server (and Icon Labs Iconfidant SSH) with multiple DoS through SSH login behavior and attempts to change authentication methods. Root cause: SSH credential handling during authentication can trigger instability, potentially causing dev...

CVE-2008-0536

CVE-2008-0536 affects Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and Icon Labs Iconfidant SSH before 2.3.8. The vulnerability allows remote SSH-based denial of service (management interface outage) by triggering illegal I/O operations during management tasks (Bu...

CVE-2008-0536

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service management interface outage via SSH traffic that occurs during management...

CVE-2008-0534

The SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device restart or daemon outage via a high rate of login attempts, aka Bug ID CSCsi68582...

CVE-2008-0534

Summary of CVE-2008-0534 : The SSH server in Cisco Service Control Engine (SCE) prior to 3.1.6 and Icon Labs Iconfidant SSH prior to 2.3.8 is affected. The vulnerability allows remote attackers to cause a denial of service (device restart or daemon outage) by issuing a high rate of login attempts...

An IE browser vulnerability security testing and analysis-vulnerability warning-the black bar safety net

Today saw on the Internet A IE little vulnerability. Do the following simple analysis The use method is as follows Program code: img src="sysimage://C:\WINNT\Notepad.exe,7 7 7" onError="document. write’bFile Exists!& lt;/b’;" Just start very strange this sysimage://is a Protocol,so in IE into:...

[SECURITY] Fedora 8 Update: xfce4-icon-theme-4.4.2-1.fc8

Icon theme for Xfce 4 Desktop Environment...

[SECURITY] Fedora 7 Update: xfce4-icon-theme-4.4.2-1.fc7

Icon theme for Xfce 4 Desktop Environment...

[SECURITY] Fedora 7 Update: kdegraphics-3.5.8-7.fc7

Graphics applications for the K Desktop Environment, including kamera digital camera support kcoloredit palette editor and color chooser kdvi displays TeX .dvi files kghostview displays postscript files kiconedit icon editor kooka scanner application kpdf displays PDF files kruler screen ruler an...

DEBIAN-CVE-2007-3126

Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237...

PT-2007-3574 · Microsoft · Windows Gdi

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Graphics Device Interface GDI+ affected versions not specified Description: The issue allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero. This...

Ordinary file deception-vulnerability warning-the black bar safety net

Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS bundle file, bundle...

Fedora Core 6 : ImageMagick-6.2.8.0-4.fc6 (2007-413)

Thu Apr 5 2007 Norm Murray - 6.2.8.0-4.fc6 - fix more overflows 235075, CVE-2007-1797 - fix icon conversions 206873 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

VulnCheck KEV: CVE-2007-0038

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file,...

Ordinary file deception-vulnerability warning-the black bar safety net

Source: whytt's Blog Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS...

CVE-2007-1177

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to 1 the query string, 2 Profiles, 3 the Forum Post icon field, 4 the Edit Profile, and 5 the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting XSS...

Data URLs with executables and misleading download dialog – Opera Security Advisories

Data URLs with executables and misleading download dialog – Opera Security Advisories OPCOM Team | February 9, 2007 Severity: Moderate Summary A data URL RCF 2397 containing an executable file maycause Opera to mislead the user. Opera’s download dialogwill in some cases say “Open with NOTEPAD.EXE...

Fedora Core 5 : mozilla-1.7.13-1.1.fc5 (2006-487)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs...

Fedora Core 4 : mozilla-1.7.13-1.1.fc4 (2006-488)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs...

Re: Secunia Research: Microsoft Windows Object Packager Dialog Spoofing

I knew about this particular flaw for some time . honestly I found it by accident, like I think the the security researcher from secunia did...or maybe it leaked from where I posted it?!?!?!!! :P. This could be a bit more critical if : 1 a '' not a '/' was placed at the end of the command line...