161 matches found
Design/Logic Flaw
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol versi...
CVE-2007-4321
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol versi...
Debian DSA-778-1 : mantis - missing input sanitising
Two security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2556 A remote attacker could supply a specially crafted URL to scan arbitrary ports on arbitrary hosts tha...
XSLT can include stylesheets from arbitrary hosts — Mozilla
xsl:include and xsl:import can include XSLT stylesheets from arbitrary domains including those behind the user's firewall. This at least allows for existence checking of these files; it's not clear how much, if any, data could be extracted from arbitrary XML files...
CVE-1999-0524
CVE-1999-0524 is an ICMP information-disclosure vulnerability where ICMP replies reveal (1) netmask and (2) timestamp to arbitrary hosts. Connected reports link it to multiple products (e.g., Nutanix AHV advisories NXSA‑AHV series and ABB M2M Gateway plugin) and describe the issue as an informati...
CVE-1999-0523
Technical details (affected products, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates.
CVE-1999-0571
A router's configuration service or management interface such as a web server or telnet is configured to allow connections from arbitrary hosts...
CVE-1999-0523
ICMP echo ping is allowed from arbitrary hosts...
CVE-1999-0510
Technical details about CVE-1999-0510 are not publicly available in the provided documents. Monitor for updates.
CVE-1999-0524
ICMP information such as 1 netmask and 2 timestamp is allowed from arbitrary hosts...
CVE-1999-0524
ICMP information such as 1 netmask and 2 timestamp is allowed from arbitrary hosts...
PT-1999-1198 · Router · Router
Name of the Vulnerable Software and Affected Versions: Router affected versions not specified Description: The issue concerns a router's configuration service or management interface, such as a web server or telnet, being configured to allow connections from arbitrary hosts. Recommendations: At t...
PT-1999-1178 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows ICMP echo ping from arbitrary hosts. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
AZL-6510 CVE-1999-0524 affecting package kernel for versions less than 5.10.78.1-1
ICMP information such as 1 netmask and 2 timestamp is allowed from arbitrary hosts...
CVE-1999-0525
IP traceroute is allowed from arbitrary hosts...
CVE-1999-0510
A router or firewall allows source routed packets from arbitrary hosts...
PT-1997-1144 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows source routed packets from arbitrary hosts, which could potentially be exploited. Recommendations: At the moment, there is no information about a newer version that...
PT-1997-1157 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A security issue allows a router's routing tables to be obtained from arbitrary hosts. Recommendations: At the moment, there is no information about a newer version that contains a fix...
PT-1997-1150 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows IP traceroute from arbitrary hosts. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...