CentOS 5 : aide (CESA-2007:0539)

An updated aide package that fixes various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Advanced Intrusion Detection Environment AIDE is a file integrity checker and intrusion detection...

CVE-2009-4413

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a...

CVE-2009-3305

Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in httpparse.c, and possibly other...

Integer overflow

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a...

Cross site request forgery (csrf)

Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in httpparse.c, and possibly other...

CVE-2009-4413

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a...

CVE-2009-4413

Removed by vendor...

CVE-2009-3305

Removed by vendor...

IBM DB2 UDB Multiple Unspecified Vulnerabilities (Linux)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmudbdb2multvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 UDB Multiple Unspecified Vulnerabilities Linux Authors: Antu Sanadi Updated By: Antu Sanadi on 2009/12/29 6444...

Mandriva Linux Security Advisory : php (MDVSA-2009:324)

Multiple vulnerabilities was discovered and corrected in php : The dbareplace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service file truncation via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the...

Polipo 1.0.4 Remote Memory Corruption

!/usr/bin/perl estranged.pl AKA Polipo 1.0.4 Remote Memory Corruption 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 Hzzp loves you Polipo! No use reporting this issue to Ubuntu Security unless you feel like waiting two weeks for them to sit on it,...

BSD (Multiple Distributions) - printf(3) Memory Corruption

BSD Multiple Distributions - printf3 Memory Corruption source: https://www.securityfocus.com/bid/36885/info Multiple BSD distributions are prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. An attacker can exploit this issue...

BSD (Multiple Distributions) - 'printf(3)' Memory Corruption

source: https://www.securityfocus.com/bid/36885/info Multiple BSD distributions are prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. An attacker can exploit this issue to cause applications to crash with a segmentation...

OpenBSD 4.6 / NetBSD 5.0.1 - 'printf(1)' Format String Parsing Denial of Service

source: https://www.securityfocus.com/bid/36884/info OpenBSD and NetBSD are prone to a denial-of-service vulnerability because they fail to properly parse format strings to the 'printf1' function. An attacker can exploit this issue to cause applications using the vulnerable call to crash with a...

Samba SWAT HTTP Authentication Buffer Overflow (CVE-2004-0600)

Samba is an open-source implementation of the file, print, and other network services suite known as SMB/CIFS Server Message Block/Common Internet File System. SWAT is a web-based administrative tool that allows an administrator to edit and view a Samba configuration. SWAT commonly listens on por...

Ubuntu USN-850-2 (poppler)

The remote host is missing an update to poppler announced via advisory USN-850-2. OpenVAS Vulnerability Test $Id: ubuntu8502.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8502.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-850-2 poppler Authors: Thomas...

[SECURITY] [DSA-1920-1] New nginx packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1920-1 [email protected] http://www.debian.org/security/ Stefan Fritsch October 26, 2009 http://www.debian.org/security/faq -...

nginx 0.7.0-0.7.61 0.6.0-0.6.38 0.5.0-0.5.37 0.4.0-0.4.14 PoC

No description provided by source. debian: uname -a Linux debian 2.6.18-6-686 1 SMP Thu Aug 20 21:56:59 UTC 2009 i686 GNU/Linux debian: cat /etc/issue Debian GNU/Linux 4.0 \n \l debian: dpkg -l|grep nginx ii nginx 0.4.13-2+etch2 small, but very powerful and efficient debian: ps xauwww|grep...

nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC

Exploit for unknown platform in category dos / poc ================================================================ nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC ================================================================ Title: nginx 0.7.0-0.7.61, 0.6.0-0.6.38,...

Nginx 0.7.0 0.7.61 0.6.0 0.6.38 0.5.0 0.5.37 0.4.0 0.4.14 - Denial of Service (PoC)

Nginx 0.7.0 0.7.61 0.6.0 0.6.38 0.5.0 0.5.37 0.4.0 0.4.14 - Denial of Service PoC debian: uname -a Linux debian 2.6.18-6-686 1 SMP Thu Aug 20 21:56:59 UTC 2009 i686 GNU/Linux debian: cat /etc/issue Debian GNU/Linux 4.0 \n \l debian: dpkg -l|grep nginx ii nginx 0.4.13-2+etch2 small, but very...