5341 matches found
Fedora Update for mantis FEDORA-2008-6647
Check for the Version of mantis OpenVAS Vulnerability Test Fedora Update for mantis FEDORA-2008-6647 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for mantis FEDORA-2008-0796
Check for the Version of mantis OpenVAS Vulnerability Test Fedora Update for mantis FEDORA-2008-0796 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for mantis FEDORA-2008-8925
Check for the Version of mantis OpenVAS Vulnerability Test Fedora Update for mantis FEDORA-2008-8925 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for mantis FEDORA-2008-6657
Check for the Version of mantis OpenVAS Vulnerability Test Fedora Update for mantis FEDORA-2008-6657 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Debian DSA-1723-1 : phpmyadmin - insufficient input sanitising
Michael Brooks discovered that phpMyAdmin, a tool to administrate MySQL over the web, performs insufficient input sanitising allowing a user assisted remote attacker to execute code on the webserver. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
[SECURITY] [DSA 1723-1] New phpmyadmin packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1723-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 11, 2009 http://www.debian.org/security/faq -...
CVE-2003-1568
GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an invalid URL, related to the websSafeUrl function...
CVE-2002-2428
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an HTTP POST request that contains a Content-Length header but no body data...
CVE-2002-2429
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service daemon crash via an HTTP POST request that contains a negative integer in the Content-Length header...
CVE-2003-1569
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service daemon crash via an HTTP request with a 1 con, 2 nul, 3 clock$, or 4 config$ device name in a path component, different vectors than CVE-2001-0385...
CVE-2002-2427
The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603...
CVE-2002-2431
Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c...
CVE-2002-2430
GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service CPU consumption by performing a socket disconnect to terminate a request before it has been fully processed by the server...
CVE-2002-2429
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service daemon crash via an HTTP POST request that contains a negative integer in the Content-Length header...
CVE-2002-2431
Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c...
CVE-2002-2427
CVE-2002-2427 affects GoAhead WebServer prior to 2.1.1, where the security handler could be bypassed to access protected web content via an extra slash in the URL. The issue is documented as a separate vulnerability from CVE-2002-1603. Public records in NVD indicate a base score of 5.0 (Medium) w...
CVE-2003-1569
CVE-2003-1569 affects GoAhead WebServer prior to 2.1.5 on Windows 95/98/ME. A remote attacker can crash the daemon by sending an HTTP request that includes a path component with a device name (con, nul, clock$, or config$), producing a denial of service. This differs from CVE-2001-0385 in vector ...
CVE-2002-2429
The vulnerability affects GoAhead WebServer, specifically the webs.c component, in versions before 2.1.4. A remote attacker can crash the daemon by sending an HTTP POST with a negative integer in the Content-Length header, leading to a denial of service. The issue is documented across multiple so...
CVE-2002-2428
CVE-2002-2428 affects the GoAhead WebServer (webs.c) prior to version 2.1.4. A remote attacker can trigger a NULL pointer dereference and daemon crash by sending an HTTP POST with a Content-Length header but no body data, resulting in a denial of service. Affected product: GoAhead WebServer; vuln...