CVE-2008-1743

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, aka Bug ID...

CVE-2008-1742

CVE-2008-1742 affects Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3). A memory leak in the Certificate Trust List (CTL) Provider service can be triggered by a sequence of malformed TCP packets, leading to denial of service via memory consumption and service interruption. The CTL Pr...

Cisco Unified Communications Manager DoS

DoS against Certificate Trust List CTL Provider TCP/2444, Certificate Authority Proxy Function CAPF TCP/3804, SIP and SNMP TRAP...

acroread JavaScript Insecure Libary Search Path

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory. NOTE: this issue might be subsumed by CVE-2008-0655...

Adobe Acrobat和Reader多个安全漏洞

BUGTRAQ ID: 27641 CVECAN ID: CVE-2007-5659,CVE-2007-5663,CVE-2007-5666,CVE-2008-0655,CVE-2008-0667,CVE-2008-0726 Adobe Acrobat和Reader都是流行的PDF文件阅读器。 Adobe Reader/Acrobat中的多个安全漏洞可能允许攻击者导致拒绝服务或完全入侵用户系统。 1 一些JavaScript方式中的多个栈溢出漏洞允许用户通过特制的.PDF文件导致执行任意指令。目前这个漏洞正在被积极的利用。 2...

CVE-2007-5666

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory. NOTE: this issue might be subsumed by CVE-2008-0655...

CVE-2007-5666

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory. NOTE: this issue might be subsumed by CVE-2008-0655...

CVE-2007-5666

Adobe Acrobat/Reader (Windows, older than 8.1.2) is affected by an untrusted search path vulnerability where a malicious Security Provider library placed in the reader’s working directory can cause arbitrary code execution with local access. Publicly noted CVEs include CVE-2007-5666, with related...

SA-2008-016 - OpenID - Incorrect claimed_id returned for OpenID 2.0

The OpenID module has a vulnerability which allows OpenID version 2.0 positive assertions that are not properly verified to return an invalid or impersonated claimedid. To exploit this vulnerability an attacker could set up an OpenID provider, example1.com, that claimed to be the authority for...

Cisco Unified Communications Manager CTL Provider Heap Overflow (CVE-2008-0027)

Cisco Unified Communications Manager provides voice, video, mobility, and presence services. The Cisco Certificate Trust List CTL Provider service handles authentication and certificate requests for the Cisco Unified Communications Manager. A buffer overflow vulnerability exists in the Certificat...

CVE-2008-0027

Heap-based buffer overflow in the Certificate Trust List CTL Provider service CTLProvider.exe in Cisco Unified Communications Manager CUCM 4.2 before 4.23SR3 and 4.3 before 4.31SR1, and CallManager 4.0 and 4.1 before 4.13SR5c, allows remote attackers to cause a denial of service or execute...

Cisco Call Manager / Cisco Unified Communications Manager buffer overflow

Buffer overflow in CTL Provider Service TCP/2444...

TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability

TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-02 January 16, 2008 -- CVE ID: CVE-2008-0027 -- Affected Vendor: Cisco -- Affected Products: Cisco Call Manager 4.13 -- Vulnerability Details: This vulnerability allows remote...

Cisco Unified Communications Manager CTL Provider Heap Overflow

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Directory traversal

Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selectedprovider parameter...

Authenticating security providers fails due to ClassLoader bugs

If the Trusted Application feature is not working and the following is seen noformat WARN atlassian.seraph.filter.TrustedApplicationsFilter Failed to login trusted application: confluence1234567 due to: com.atlassian.security.auth.trustedapps.InvalidCertificateException:...

xcart-rfi.txt

xCart Remote file inclusion Download script : http://www.x-cart.com// Discovered By : aLiiF a.k.a arif @debuteam 07/09/2007 HomePage : http://www.debuteam.net// Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0ng0ku^ Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKey s3ng0k homeedition Holong...

Design/Logic Flaw

Entrust Entelligence Security Provider ESP 8 does not properly validate certificates in certain circumstances involving 1 a chain that omits the root Certification Authority CA certificate, or an application that specifies disregarding 2 unknown revocation statuses during path validation or 3...

CVE-2007-4594

Entrust Entelligence Security Provider ESP 8 does not properly validate certificates in certain circumstances involving 1 a chain that omits the root Certification Authority CA certificate, or an application that specifies disregarding 2 unknown revocation statuses during path validation or 3...

CVE-2007-4594

Entrust Entelligence Security Provider (ESP) 8 is affected by improper certificate validation in certain path-validation scenarios: (1) a chain that omits the root CA, (2) applications ignoring unknown revocation statuses, and (3) certain certification path errors. This could allow context-depend...