RHEL 6 : subversion (RHSA-2013:0737)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0737 advisory. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarc...

mod_dav_svn, subversion security update

CentOS Errata and Security Advisory CESA-2013:0737 Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System...

Medium: subversion

Issue Overview: A NULL pointer dereference flaw was found in the way the moddavsvn module handled PROPFIND requests on activity URLs. A remote attacker could use this flaw to cause the httpd process serving the request to crash. CVE-2013-1849 A flaw was found in the way the moddavsvn module handl...

CVE-2013-1282

The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...

Memory corruption

The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...

CVE-2013-1282

The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...

CVE-2013-1821

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service memory consumption and crash via crafted text nodes in an XML document, aka an XML Entity Expansion XEE attack...

Design/Logic Flaw

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service memory consumption and crash via crafted text nodes in an XML document, aka an XML Entity Expansion XEE attack...

CVE-2013-1821

CVE-2013-1821 is an XML Entity Expansion (XEE) denial-of-service vulnerability in the REXML parser of Ruby. The provided sources confirm affected Ruby/REXML configurations across multiple lines: Ruby before 1.9.3-p392 (initial description) and extended references indicate the issue affects 1.9.x ...

CVE-2013-1801

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for YAML type...

CVE-2013-0285

The nori gem 2.0.x before 2.0.2, 1.1.x before 1.1.4, and 1.0.x before 1.0.3 for Ruby does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involving...

Type confusion

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for YAML type...

Type confusion

The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for 1 YAML type...

CVE-2013-1801

Technical details for CVE-2013-1801 are not publicly available in the provided documents. No vendor/product/version specifics or remediation are disclosed here. Monitor for updates from official sources to obtain concrete details and fixes.

CVE-2013-1802

The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for 1 YAML typ...

Strawberry Perl Denial of Service Vulnerability (Windows)

The host is installed with Strawberry Perl and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbstrawberryperldosvulnwin.nasl 6079 2017-05-08 09:03:33Z teissa $ Strawberry Perl Denial of Service Vulnerability Windows Authors: Arun Kallavi Copyright: Copyright c 2013...

Active Perl Denial of Service Vulnerability - Windows

Active Perl is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Strawberry Perl Denial of Service Vulnerability - Windows

Strawberry Perl is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Active Directory LDAP Request Memory Consumption (MS13-032; CVE-2013-1282)

A denial of service vulnerability exists in implementations of Active Directory. Successful exploitation could cause the service to stop responding. The vulnerability is caused when the LDAP service fails to handle a specially crafted query. A Remote attacker can exploit this issue via a speciall...

Active Perl Denial of Service Vulnerability (Windows)

The host is installed with Active Perl and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbactiveperldosvulnwin.nasl 6093 2017-05-10 09:03:18Z teissa $ Active Perl Denial of Service Vulnerability Windows Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone...