SuiteCRM 注入漏洞

SuiteCRM is a customer relationship management system developed by the SuiteCRM team. Versions prior to SuiteCRM 7.15.1 and 8.9.3 had an injection vulnerability. This vulnerability stemmed from improper cleanup of user input during the authentication process. As a result, unauthenticated attacker...

MiracleLinux 4 : 389-ds-base-1.2.11.15-12.AXS4 (AXSA:2013-201:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-201:02 advisory. 389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration. Security...

EUVD-2013-0330

Malware in sbrugna...

Ubuntu 16.04 LTS / 18.04 LTS : Samba vulnerabilities (USN-4167-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4167-1 advisory. Michael Hanselmann discovered that the Samba client code incorrectly handled path separators. If a user were tricked into connecting to a...

USN-4167-2: Samba vulnerabilities

USN-4167-1 fixed several vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Michael Hanselmann discovered that the Samba client code incorrectly handled path separators. If a user were tricked into connecti...

USN-4167-2 samba vulnerabilities

USN-4167-1 fixed several vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Michael Hanselmann discovered that the Samba client code incorrectly handled path separators. If a user were tricked into connecti...

USN-4167-1: Samba vulnerabilities

Michael Hanselmann discovered that the Samba client code incorrectly handled path separators. If a user were tricked into connecting to a malicious server, a remote attacker could use this issue to cause the client to access local pathnames instead of network pathnames. CVE-2019-10218 Simon...

CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

Design/Logic Flaw

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...