Buffer underflow vulnerability

Buffer underflow vulnerability Severity: major CVE-2009-2629 Not vulnerable: 0.8.15+, 0.7.62+, 0.6.39+, 0.5.38+ Vulnerable: 0.1.0-0.8.14...

CVE-2009-2629

CVE-2009-2629 affects the nginx HTTP server, originating from a buffer underflow in ngx_http_parse.c used when processing request URIs. Public sources in the provided documents specify that versions 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 are vulner...

CVE-2009-2629

Buffer underflow in src/http/ngxhttpparse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests...

[SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1884-1 [email protected] http://www.debian.org/security/ Nico Golde September 14th, 2009 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1884-1 (nginx)

The remote host is missing an update to nginx announced via advisory DSA 1884-1. OpenVAS Vulnerability Test $Id: deb18841.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1884-1 nginx Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Nginx ngx_http_parse_complex_uri() buffer underflow vulnerability

Overview A vulnerability in the nginx web server may allow remote attackers to execute arbitrary code on an affected system. Description nginx is an HTTP server and mail proxy server that is available for a number of different platforms. A buffer underflow vulnerability exists in the...

Debian: Security Advisory (DSA-1884-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1884-1 [email protected] http://www.debian.org/security/ Nico Golde September 14th, 2009 http://www.debian.org/security/faq -...

DSA-1884-1 nginx - arbitrary code execution

Bulletin has no description...

Mandrake Security Advisory MDVSA-2009:169 (libtiff)

The remote host is missing an update to libtiff announced via advisory MDVSA-2009:169. OpenVAS Vulnerability Test $Id: mdksa2009169.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:169 libtiff Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:169 (libtiff)

The remote host is missing an update to libtiff announced via advisory MDVSA-2009:169. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

GLSA-200908-03 : libTIFF: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200908-03 libTIFF: User-assisted execution of arbitrary code Two vulnerabilities have been reported in libTIFF: wololo reported a buffer underflow in the LZWDecodeCompat function CVE-2009-2285. Tielei Wang of ICST-ERCIS, Peking...

libTIFF: User-assisted execution of arbitrary code

Background libTIFF provides support for reading and manipulating TIFF Tagged Image File Format images. Description Two vulnerabilities have been reported in libTIFF: wololo reported a buffer underflow in the LZWDecodeCompat function CVE-2009-2285. Tielei Wang of ICST-ERCIS, Peking University...

openSUSE Security Update : libtiff3 (libtiff3-1071)

This update of libtiff fixes a buffer underflow in LZWDecodeCompat CVE-2009-2285. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff3-1071. The text description of this plugin is C SUSE...

openSUSE Security Update : libtiff3 (libtiff3-1071)

This update of libtiff fixes a buffer underflow in LZWDecodeCompat CVE-2009-2285. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff3-1071. The text description of this plugin is C SUSE...

Mandrake Security Advisory MDVSA-2009:150 (libtiff)

The remote host is missing an update to libtiff announced via advisory MDVSA-2009:150. OpenVAS Vulnerability Test $Id: mdksa2009150.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:150 libtiff Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

openSUSE Security Update : libapr-util1 (libapr-util1-968)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

openSUSE Security Update : libapr-util1 (libapr-util1-968)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

openSUSE Security Update : libtiff (libtiff-162)

A buffer underflow CVE-2008-2327 has been fixed in libtiff. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff-162. The text description of this plugin is C SUSE LLC...

Mandriva Linux Security Advisory : libtiff (MDVSA-2009:150)

Multiple vulnerabilities has been found and corrected in libtiff : Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327 CVE-2009-2285. Fix...