RHEL 2.1 : nfs-utils (RHSA-2003:207)

Updated nfs-utils packages are available that fix a remotely exploitable Denial of Service vulnerability. The nfs-utils package provides a daemon for the kernel NFS server and related tools. Janusz Niewiadomski found a buffer overflow bug in nfs-utils version 1.0.3 and earlier. This bug could be...

FreeBSD : clamav remote denial-of-service (24)

The following package needs to be updated: clamav %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg74a9541d5d6c11d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : ezbounce remote format string vulnerability (45)

The following package needs to be updated: ezbounce %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgc480eb5e7f0011d8868e000347dd607f.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

[security bulletin] SSRT4758 rev. 0 HP-UX ObAM WebAdmin unauthorized access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01047 REVISION: 0 SSRT4758 rev. 0 HP-UX ObAM WebAdmin unauthorized access ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin provided that it...

CVS - Remote Entry Line Root Heap Overflow

CVS - Remote Entry Line Root Heap Overflow include include include include include include include include include include include include include include define CVSPORT 2401 define RET 0xffbffd20 define NOP 0x82102017 define ROUNDs if s % wordsize s += wordsize - s % wordsize unsigned char root;...

Subversion 1.0.2 svn_time_from_cstring() Remote Exploit

Exploit for linux platform in category remote exploits ======================================================= Subversion 1.0.2 svntimefromcstring Remote Exploit ======================================================= / subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in t...

[SECURITY] [DSA 520-1] New krb5 packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 520-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 16th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0551

Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...

[UNIX] Chora CVS/SVN Viewer Remote Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[SECURITY] [DSA 517-1] New CVS packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 517-1 [email protected] http://www.debian.org/security/ Martin Schulze June 10th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 512-1] New gallery packages fix unauthenticated access

-------------------------------------------------------------------------- Debian Security Advisory DSA 512-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 2nd, 2004 http://www.debian.org/security/faq -...

Firebird 1.0 - Remote Database Name Buffer Overrun

Firebird 1.0 - Remote Database Name Buffer Overrun source: https://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling...

VocalTec VGW120VGW480 Telephony Gateway Remote H.225 - Denial of Service

VocalTec VGW120VGW480 Telephony Gateway Remote H.225 - Denial of Service // source: https://www.securityfocus.com/bid/10411/info It has been reported that the VocalTec VGW120 and VGW480 Telephony Gateways are prone to a remote denial of service vulnerability. The issue is reported to exist in the...

[UNIX] Firebird Database Remote Database Name Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Mollensoft Lightweight FTP Server 3.6 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10409/info A denial of service condition is reported to exist in the MollenSoft Lightweight FTP Server that may allow a remote user to deny service to legitimate FTP users. The vulnerability is due to a lack of sufficient boundary checks performed on CWD...

e107 Website System 0.50.6 - Log.php HTML Injection

e107 Website System 0.50.6 - Log.php HTML Injection source: https://www.securityfocus.com/bid/10395/info It is reported that e107 website system is prone to a remote HTML injection vulnerability. This issue is due to a failure by the application to properly sanitize user-supplied input. The probl...

[SECURITY] [DSA 507-1] New cadaver packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 507-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 506-1] New neon packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 506-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2004 http://www.debian.org/security/faq -...

Advisory 07/2004: CVS remote vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: CVS remote vulnerability Release Date: 2004/05/19 Last Modified: 2004/05/19 Author: Stefan Esser [email protected] Application: CVS feature release = 1.12.7 CVS stable release =...

CVS pserver Line Entry Handling Overflow

According to its version number, the remote CVS server has a heap- based buffer overflow vulnerability. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12240;...