724 matches found
WordPress WP-Syntax 0.9.1 Command Execution
====================================================================== Wordpress plugin WP-Syntax $functions if isnull$functions continue; foreach$functions as $function $string = calluserfuncarray$function, array$string; return $string; ... Global variable testfilter is not defined, so...
Fedora Core 10 FEDORA-2009-5284 (quagga)
The remote host is missing an update to quagga announced via advisory FEDORA-2009-5284. OpenVAS Vulnerability Test $Id: fcore20095284.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5284 quagga Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Fedora 11 : quagga-0.99.12-1.fc11 (2009-5324)
The latest upstream version fixes serious assert crashing with ASN4's. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 10 : quagga-0.99.12-1.fc10 (2009-5284)
The latest upstream version fixes serious assert crashing with ASN4's. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
DSA-1788-1 quagga - denial of service
Bulletin has no description...
quagga -- Denial of Service
Debian Security Team reports: It was discovered that Quagga, an IP routing daemon, could no longer process the Internet routing table due to broken handling of multiple 4-byte AS numbers in an AS path. If such a prefix is received, the BGP daemon crashes with an assert failure leading to a denial...
Debian DSA-1690-1 : avahi - assert errors
Two denial of service conditions were discovered in avahi, a Multicast DNS implementation. Huge Dias discovered that the avahi daemon aborts with an assert error if it encounters a UDP packet with source port 0 CVE-2008-5081 . It was discovered that the avahi daemon aborts with an assert error if...
KDE Konqueror字体颜色'断言'拒绝服务漏洞
BUGTRAQ ID: 31605 CNCAN ID:CNCAN-2008100805 Konqueror是一款桌面环境的文件管理器,也可用于浏览WEB。 Konqueror处理特殊构建的HMTL 'font'标签,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建特殊的WEB页,诱使Konqueror处理可导致应用程序崩溃。 KDE Konqueror 3.5.9 目前没有解决方案提供: http://www.konqueror.org/ perl -e 'print "html\n" . "font color=" . "A" x 500000 . "\n/html"'...
GLSA-200808-09 : OpenLDAP: Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200808-09 OpenLDAP: Denial of Service vulnerability Cameron Hotchkies discovered an error within the parsing of ASN.1 BER encoded packets in the 'bergetnext' function in libraries/liblber/io.c. Impact : A remote unauthenticated...
America's army game server DoS
Invalid assert on network traffic parsing...
CVE-2008-3210
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...
Code injection
The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...
DEBIAN-CVE-2008-1612
The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...
CVE-2008-1612
The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...
CVE-2008-1612
The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...
PT-2008-3168 · Squid +1 · Squid +2
Name of the Vulnerable Software and Affected Versions: Squid version 2.6.STABLE17 Description: The issue is related to the arrayShrink function in lib/Array.c, which allows attackers to cause a denial of service, resulting in a process exit. This occurs when an array is shrunk to 0 entries,...
Debian Security Advisory DSA 964-1 (gnocatan)
The remote host is missing an update to gnocatan announced via advisory DSA 964-1. A problem has been discovered in gnocatan, the computer version of the settlers of Catan boardgame, that can lead the server an other clients to exit via an assert, and hence does not permit the execution of...
DEBIAN-CVE-2007-6010
Unspecified vulnerability in pioneers formerly gnocatan 0.11.3 allows remote attackers to cause a denial of service daemon crash via unspecified vectors that trigger an assert error. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-5933...