openSUSE Security Update : openslp (openslp-492)

OpenSLP prior this update does not correctly check the return values of OpenSSL functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openslp-492. The text description of this plugin is C...

openSUSE Security Update : openslp (openslp-492)

OpenSLP prior this update does not correctly check the return values of OpenSSL functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openslp-492. The text description of this plugin is C...

openSUSE 10 Security Update : openslp (openslp-5976)

OpenSLP prior this update does not correctly check the return values of OpenSSL functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openslp-5976. The text description of this plugin is ...

Gentoo Security Advisory GLSA 200503-25 (OpenSLP)

The remote host is missing updates announced in advisory GLSA 200503-25. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200503-25 (OpenSLP)

The remote host is missing updates announced in advisory GLSA 200503-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 4.10 : openslp vulnerabilities (USN-98-1)

The SuSE Security Team discovered several buffer overflows in the OpenSLP server and client library. By sending specially crafted SLP packets, a remote attacker could exploit this to crash the SLP server or execute arbitrary code with the privileges of the 'daemon' user. Likewise, a malicious SLP...

CVE-2005-0769

Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets...

CVE-2005-0769

Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets...

GLSA-200503-25 : OpenSLP: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200503-25 OpenSLP: Multiple buffer overflows Multiple buffer overflows have been found in OpenSLP, when handling malformed SLP packets. Impact : By sending specially crafted SLP packets, a remote attacker could potentially execute...

OpenSLP: Multiple buffer overflows

Background OpenSLP is an open-source implementation of Service Location Protocol SLP. Description Multiple buffer overflows have been found in OpenSLP, when handling malformed SLP packets. Impact By sending specially crafted SLP packets, a remote attacker could potentially execute arbitrary code...

CVE-2005-0769

Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets...

CVE-2005-0769

CVE-2005-0769 affects OpenSLP prior to 1.1.5. Multiple buffer overflows in the OpenSLP service when handling malformed SLP packets allow remote attackers to potentially execute code or cause other effects; some sources describe the risk as remote arbitrary-code execution, while NVD notes an unkno...

USN-98-1: OpenSLP vulnerabilities

The SuSE Security Team discovered several buffer overflows in the OpenSLP server and client library. By sending specially crafted SLP packets, a remote attacker could exploit this to crash the SLP server or execute arbitrary code with the privileges of the "daemon" user. Likewise, a malicious SLP...

Mandrake Linux Security Advisory : openslp (MDKSA-2005:055)

An audit by the SUSE Security Team of critical parts of the OpenSLP package revealed various buffer overflow and out of bounds memory access issues. These problems can be triggered by remote attackers by sending malformed SLP packets. The packages have been patched to prevent these problems...

SUSE-SA:2005:015: openslp

The remote host is missing the patch for the advisory SUSE-SA:2005:015 openslp. The SUSE Security Team reviewed critical parts of the OpenSLP package, an open source implementation of the Service Location Protocol SLP. SLP is used by Desktops to locate certain services such as printers and by...

[Full-disclosure] SUSE Security Announcement: openslp (SUSE-SA:2005:015)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: openslp Announcement-ID: SUSE-SA:2005:015 Date: Mon, March 14th 14:41:14 CET 2005 Affected products: 9.1, 9.2 SUSE Linux Enterprise Server 9 Novell Linux Desktop 9 Vulnerability Type: remote command execution Severity 1-10: 5...

CVE-2003-0875

Symbolic link vulnerability in the slpd script slpd.allinit for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via the route.check temporary file...

CVE-2003-0875

Symbolic link vulnerability in the slpd script slpd.allinit for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via the route.check temporary file...

CVE-2003-0875

OpenSLP before 1.0.11 contains a symbolic link vulnerability in the slpd.all_init script that allows local users to overwrite arbitrary files via the route.check temporary file. This CVE (CVE-2003-0875) is documented in NVD and related sources; no exploitation details or patches are provided in t...

OpenSLP symbolic links problem

Symbolic links problem during temporary files creation...