1085 matches found
CVE-2011-0418
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service memory consumption via a crafted FTP STAT command...
CVE-2011-0418
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service memory consumption via a crafted FTP STAT command...
CVE-2011-1920
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to 1 bsd.lib.mk and 2 bsd.prog.mk...
CVE-2011-1920
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to 1 bsd.lib.mk and 2 bsd.prog.mk...
Design/Logic Flaw
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to 1 bsd.lib.mk and 2 bsd.prog.mk...
CVE-2011-1920
CVE-2011-1920 affects NetBSD make include files (bsd.lib.mk, bsd.prog.mk) as used by pmake 1.111 and related products; local users can overwrite arbitrary files via a symlink attack on a /tmp/_depend##### file. Affected: NetBSD make includes; pmake usage; vulnerability arises from insecure tempor...
CVE-2011-1920
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to 1 bsd.lib.mk and 2 bsd.prog.mk...
CVE-2011-0419
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...
CVE-2011-0419
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...
CVE-2011-0419
CVE-2011-0419 is a stack consumption/DoS vulnerability in the APR library’s fnmatch implementation (apr_fnmatch.c) and, for some platforms, in libc’s fnmatch.c. It affects APR < 1.4.3 and Apache HTTP Server
CVE-2011-0419
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...
Multiple Vendors libc/fnmatch(3) DoS (incl apache poc)
Multiple Vendors libc/fnmatch3 DoS incl apache poc Author: Maksymilian Arciemowicz http://netbsd.org/donations/ http://securityreason.com/ http://cxib.net/ Date: - Dis.: 29.01.2011 - Pub.: 13.05.2011 CVE: CVE-2011-0419 CWE: CWE-399 Affected Software verified: - Apache 2.2.17 - NetBSD 5.1 - OpenBS...
apr: unconstrained recursion in apr_fnmatch
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...
CVE-2011-1547
Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service memory corruption and panic or possibly have unspecified other impact via a crafted 1 IPv4 or 2 IPv6 packet wi...
Memory corruption
Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service memory corruption and panic or possibly have unspecified other impact via a crafted 1 IPv4 or 2 IPv6 packet wi...
CVE-2011-1547
CVE-2011-1547 affects NetBSD-derived IPComp/IPsec stacks. Affected: NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1. Root cause: kernel handling of nested IPComp payloads can overflow the stack, leading to remote memory corruption and panics; some sources describe pre-auth kernel memory corrup...
CVE-2011-1547
Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service memory corruption and panic or possibly have unspecified other impact via a crafted 1 IPv4 or 2 IPv6 packet wi...
0day Exploit Released : Adobe, HP, Sun, Microsoft Interix & many more Vendors FTP hackable !
0day Exploit Released : Adobe, HP, Sun, Microsoft Interix & many more Vendors FTP hackable ! Topic : Multiple Vendors libc/glob3 resource exhaustion +0day remote ftpd-anon CVE : CVE-2010-2632 CWE : CWE-NOMAPPING SecurityRisk : Medium About Remote Exploit : Yes Local Exploit : Yes Victim interacti...
BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload
BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload ------------------------------------------------------------------------------- Gruezi, this document describes CVE-2011-1547. RFC3173 ip payload compression, henceforth ipcomp, is a protocol intended to provide...
NetBSD/FreeBSD IPComp实现栈溢出远程内存破坏漏洞
Bugtraq ID: 47123 IPcomp是一款IP有效载荷压缩协议，为IP层提供无损耗压缩。 源自NetBSD/KAME的IPComp实现，未压缩负载的注入其代码类似如下： algo = ipcompalgorithmlookupcpi; / ... / error = algo-decompressm, m-mnext, &newlen; / ... / if nxt != IPPROTODONE if inetswipprotoxnxt.prflags & PRLASTHDR != 0 && ipsec4inrejectm, NULL...