186 matches found
CVE-2007-5275
The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash SWF movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML...
Design/Logic Flaw
DenyHosts 2.6 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol version...
CVE-2007-4321
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol versi...
Design/Logic Flaw
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol versi...
CVE-2006-2706: Undefined Security Weakness
Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 allows remote attackers to cause a denial of service via forged "session start" messages that cause AVR to connect to arbitrary hosts...
Debian DSA-778-1 : mantis - missing input sanitising
Two security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2556 A remote attacker could supply a specially crafted URL to scan arbitrary ports on arbitrary hosts tha...
XSLT can include stylesheets from arbitrary hosts — Mozilla
xsl:include and xsl:import can include XSLT stylesheets from arbitrary domains including those behind the user's firewall. This at least allows for existence checking of these files; it's not clear how much, if any, data could be extracted from arbitrary XML files...
CVE-1999-0523
Technical details (affected products, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates.
CVE-1999-0523
ICMP echo ping is allowed from arbitrary hosts...
CVE-1999-0524
ICMP information such as 1 netmask and 2 timestamp is allowed from arbitrary hosts...
CVE-1999-0510
Technical details about CVE-1999-0510 are not publicly available in the provided documents. Monitor for updates.
CVE-1999-0524
ICMP information such as 1 netmask and 2 timestamp is allowed from arbitrary hosts...
CVE-1999-0571
A router's configuration service or management interface such as a web server or telnet is configured to allow connections from arbitrary hosts...
CVE-1999-0524
CVE-1999-0524 is an ICMP information-disclosure vulnerability where ICMP replies reveal (1) netmask and (2) timestamp to arbitrary hosts. Connected reports link it to multiple products (e.g., Nutanix AHV advisories NXSA‑AHV series and ABB M2M Gateway plugin) and describe the issue as an informati...
CVE-1999-0571: Undefined Security Weakness
A router's configuration service or management interface such as a web server or telnet is configured to allow connections from arbitrary hosts...
CVE-1999-0525: Undefined Security Weakness
IP traceroute is allowed from arbitrary hosts...
PT-1999-1178 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows ICMP echo ping from arbitrary hosts. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-1999-1198 · Router · Router
Name of the Vulnerable Software and Affected Versions: Router affected versions not specified Description: The issue concerns a router's configuration service or management interface, such as a web server or telnet, being configured to allow connections from arbitrary hosts. Recommendations: At t...
