235 matches found
PT-2013-1518 · Red Hat · Red Hat Enterprise Virtualization Manager
Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization Manager RHEV-M versions prior to 3.1 Description: The issue allows local users to gain privileges via a Trojan horse Python module, specifically deployUtil.py or vds bootstrap.py, in the /tmp/ directory when...
DEBIAN-CVE-2012-0256
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service daemon crash via a long HTTP Host header...
PT-2011-5001 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 Description: The issue allows local users to cause a denial of service, resulting in a system crash, via crafted use of the sendmmsg system call. This is due to an incorrect pointer dereference in the sys...
kernel: ipv6: make fragment identifications less predictable
The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service disrupted networking by predicting these values and sending crafted packets...
kernel: cifs: signedness issue in CIFSFindNext()
Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service memory corruption or possibly have unspecified other impact via a large length value in a response to a read request for a directory...
PT-2011-1066 · Suse +2 · Ext4Dev-Kmp-Trace +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 ext4dev-kmp-trace affected versions not specified Description: The issue concerns the Linux kernel's IPv4 and IPv6 implementations, which use a modified MD4 algorithm. This makes it easier for remote attacke...
PT-2005-2483 · Fishcart · Fishcart
Name of the Vulnerable Software and Affected Versions: FishCart version 3.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the cartid parameter to 'upstnt.php' or the psku parameter to 'display.php'. The vendor disputes this report,...
DEBIAN-CVE-2005-0017
The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files...
DelphiTurk CodeBank 3.1 - Local Username and Password Disclosure
DelphiTurk CodeBank 3.1 - Local Username and Password Disclosure / DelphiTurk CodeBank Local Exploit Application: DelphiTurk CodeBank 3.1 and previous versions Procuder: Delphiturk.com Vulnerable Description: Delhiturk CodeBank discloses username and password to local users. Coded by: Kozan Web:...
Ikonboard < 3.1.3 ikonboard.cgi Multiple Parameter SQL Injection
Binary data 2462.prm...
Helm Control Panel < 3.1.20 Multiple Input Validation Vulnerabilities
Binary data 2390.prm...
IceWarp Web Mail < 5.3.1 Multiple Vulnerabilities (2)
Binary data 2387.prm...
PHP Include Exploit in Mail Manage EX v3.1.8 and maybe others.
Description: PHP Include Exploit in Mail Manage EX v3.1.8 Compromise: a malicious PHP script from an external host may be included and executed. Vulnerable Systems: all system using mmex.php v3.1.8 and maybe lower not tested. Details: The PHP Include exploit exist in de folowing code,...
SECURITY.NNOV: ikonboard 3.1.1 CSS
Dear bugtraq@, Ikonboard CSS bug via IMG tag was reported long time ago for 3.0.x. The only change in Ikonboard 3.1.1 at least on sending private messages is it checks URL extension to be .gif or .jpg, so IMGjavascript:alertdocument.cookie.gif/IMG still works perfectly.... Sorry if it was already...
