PT-2001-1156 · Ibm · Lotus Notes Client

Name of the Vulnerable Software and Affected Versions: Lotus Notes Client R5 Description: The issue concerns the Extended Control List ECL feature of the Java Virtual Machine JVM in the affected software. It allows malicious web site operators to determine the existence of files on the client by...

Input validation error in quikstore.cgi allows attackers to execute commands

Overview The quikstore shopping cart script contains an input validation error that allows attackers to execute commands on affected web servers. Description The quikstore.cgi script is written in Perl and provides its users with shopping cart software for e-commerce transactions. In November 200...

Cisco IOS software vulnerable to DoS via HTTP request containing "?/"

Overview A vulnerability exists in multiple versions of Cisco's Internetworking Operating System IOS software that allows an attacker to force affected switches and routers to crash and reboot. Description To exploit this vulnerability, the IOS HTTP interface must be enabled and the attacker must...

PT-2000-1437 · Bea · Bea Weblogic

Name of the Vulnerable Software and Affected Versions: BEA WebLogic versions 3.1.8 through 4.5.1 Description: The default configuration of the software allows a remote attacker to view the source code of a JSP program. This can be achieved by requesting a URL that provides the JSP extension in...

CVE-1999-0895

The provided data identifies CVE-1999-0895 affecting Firewall-1, in which LDAP attributes are not properly restricted. The entry describes a network-exposed issue with no authentication required, leading to partial disclosure/integrity/availability impact (CVSS v2 base score 7.5, HIGH). No concre...

PT-1999-1002 · Sun Microsystems · Solaris

Name of the Vulnerable Software and Affected Versions: Sun Microsystems Solaris versions 8 and 9, and certain earlier releases Description: The issue is related to insufficient protection of sensitive data in the /usr/ucb/ps component of the Solaris operating system. This allows local users to vi...

linux.2.x.ipc.DoS.txt

Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Linux 2.x IPC vunerability Linux IPC implementation seems to be broken. I noticed Alan about one/two months ago, so I believe it has been fixed in recent 2.2.x Linuxes. In fact, any luser may consume whole memory available on system using...

compaq.insight.manager.server.txt

Date: Wed, 26 May 1999 16:41:36 +0100 From: [email protected] To: [email protected] Subject: Infosec.19990526.compaq-im.a Infosec Security Vulnerability Report No: Infosec.19990526.compaq-im.a ===================================== Vulnerability Summary --------------------- Problem:...

PT-1997-1001

Name of the Vulnerable Software and Affected Versions Mac OS versions affected versions not specified Cisco IOS versions affected versions not specified HP-UX versions affected versions not specified Tru64 UNIX versions affected versions not specified AIX versions affected versions not specified...

PT-1997-1050 · Ibm · Aix Innd

Name of the Vulnerable Software and Affected Versions: AIX innd version 1.5.1 Description: The issue concerns remote access in AIX innd, specifically involving the use of control messages. Recommendations: For AIX innd version 1.5.1, consider restricting access to control messages as a temporary...

PT-1996-1028 · Perl · Suidperl +1

Name of the Vulnerable Software and Affected Versions: sperl affected versions not specified suidperl affected versions not specified Description: The issue concerns the suidperl and sperl programs, which fail to relinquish root privileges when switching UIDs back to the original users. This allo...

PT-2013-6313 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.14.3 Description: The issue is related to the BPF S ANC NLATTR and BPF S ANC NLATTR NEST extension implementations in the sk run filter function in net/core/filter.c, which do not check whether a certain length...

PT-2005-5611 · Pcre +1 · Libpcre +4

Name of the Vulnerable Software and Affected Versions: PCRE library versions prior to 6.7 libpcre versions prior to 7.3-r1 pcre-32bit affected versions not specified pcre affected versions not specified pcre-devel affected versions not specified Description: The issue is related to an integer...

PT-2010-5625 · Openldap +1 · Libldap +3

Name of the Vulnerable Software and Affected Versions: openldap versions 2.2.13 through 2.4.22 openldap versions prior to 2.4.35 openldap-clients-2.2.13 openldap-servers-2.2.13 openldap-servers-sql-2.2.13 openldap-devel-2.2.13 compat-openldap-2.1.30 libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev...

PT-2011-5224 · Popt +3 · Popt +3

Name of the Vulnerable Software and Affected Versions: RPM versions 4.4.x through 4.9.x rpm package affected versions not specified rpm-devel affected versions not specified rpm-devel-32bit affected versions not specified rpm-devel-64bit affected versions not specified rpm-32bit affected versions...

PT-2005-5562 · Gtk+ +1 · Gtk+ +1

Name of the Vulnerable Software and Affected Versions: GTK+ version 2.4.0 GTK+ versions prior to 2.8.6-r1 Description: The issue is related to an integer overflow in the GTK+ gdk-pixbuf XPM image rendering library, which can lead to a heap-based buffer overflow, allowing attackers to execute...

PT-2009-6722 · Linux +2 · Udev-Debuginfo +10

Name of the Vulnerable Software and Affected Versions: udev versions prior to 1.4.1 libudev0-128 libudev-devel-128 libvolume-id0 libvolume id-devel-128 libvolume id1-128 udev-udeb udev-debugsource-128 udev-128 udev-debuginfo-128 udev-debuginfo-085 libvolume-id-dev Description: The issue concerns...