OpenLDAP BER Decoding Denial of Service (CVE-2008-2952)

OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol LDAP service. There exists a denial of service vulnerability in OpenLDAP slapd. The flaw is due to a design error when decoding ASN.1 BER network messages. A remote unauthenticated attacker can trigger this...

uhttp Server Path Traversal Vulnerability

Exploit for multiple platform in category remote exploits ========================================= uhttp Server Path Traversal Vulnerability ========================================= uhttp Server Path Traversal Vulnerability Name uhttp Server Vendor http://uhttps.sourceforge.net Versions Affecte...

uhttp Server 0.1.0-alpha - Directory Traversal

uhttp Server 0.1.0-alpha - Directory Traversal uhttp Server Path Traversal Vulnerability Name uhttp Server Vendor http://uhttps.sourceforge.net Versions Affected 0.1.0-alpha Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date...

Fedora Update for transmission FEDORA-2010-0197

Check for the Version of transmission OpenVAS Vulnerability Test Fedora Update for transmission FEDORA-2010-0197 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 12 Update: transmission-1.77-1.fc12

Transmission is a free, lightweight BitTorrent client. It features a simple, intuitive interface on top on an efficient, cross-platform back-end...

Novell eDirectory evtFilteredMonitorEventsRequest Function Heap Overflow (CVE-2006-4509)

Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. On a default installation, the eDirectory LDAP server uses TCP port 389 for clear text LDAP communication. A heap buffer overflow vulnerability exists in the Novell eDirectory product line. The flaw is...

[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...

OpenJDK remote LDAP Denial-Of-Service (6717680)

LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier does not close the connection when initialization fails, which allows remote attackers to cause ...

MuPDF pdf_shade4.c Multiple Stack-Based Buffer Overflows

Exploit for unknown platform in category local exploits ======================================================== MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows ======================================================== Title: MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows CVE-ID:...

K-Meleon 1.5.3 Remote Array Overrun

Exploit for unknown platform in category dos / poc =================================== K-Meleon 1.5.3 Remote Array Overrun =================================== Title: K-Meleon 1.5.3 Remote Array Overrun CVE-ID: OSVDB-ID: Author: Maksymilian Arciemowicz and sp3x Published: 2009-11-19 Verified: yes...

DSA-1917-1 mimetex - several vulnerabilities

Bulletin has no description...

[SECURITY] Fedora 10 Update: dnsmasq-2.46-2.fc10

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

CVE-2008-7171

Multiple cross-site scripting XSS vulnerabilities in Lightweight news portal LNP 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 photo parameter to showphoto.php, 2 potd parameter to showpotd.php, or 3 the Current question field in a vote action to admin.php...

CVE-2008-7172

Lightweight news portal LNP 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the 1 potddelete, 2 potd, 3 voteupdate, 4 vote, or 5 modifynews actions...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Lightweight news portal LNP 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 photo parameter to showphoto.php, 2 potd parameter to showpotd.php, or 3 the Current question field in a vote action to admin.php...

CVE-2008-7171

Multiple cross-site scripting XSS vulnerabilities in Lightweight news portal LNP 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 photo parameter to showphoto.php, 2 potd parameter to showpotd.php, or 3 the Current question field in a vote action to admin.php...

CVE-2008-7171

CVE-2008-7171 concerns Lightweight News Portal (LNP) 1.0b, with three documented XSS vectors: (1) photo parameter to show_photo.php, (2) potd parameter to show_potd.php, and (3) the Current question field in a vote action to admin.php. The vulnerabilities allow remote attackers to inject arbitrar...

CVE-2008-7172

The CVE-2008-7172 entry documents a privilege-escalation flaw in Lightweight news portal (LNP) 1.0b where access to administrator functionality is not properly restricted. An attacker can obtain administrator privileges by issuing direct requests to admin.php with actions: potd_delete, potd, vote...

CVE-2009-2861

The Over-the-Air Provisioning OTAP functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service service outage via crafted remote radio manageme...

CVE-2009-2976

Cisco Aironet Lightweight AP devices transmit certain multicast frames in cleartext, enabling remote attackers who sniff the wireless medium to discover Wireless LAN Controller MAC addresses, IP addresses, and AP configuration details. The connected reports reiterate this behavior without providi...