CA BrightStor ARCserve Backup Discovery Service Denial of Service (CVE-2008-1979)

Computer Associates' CA BrightStor ARCserve Backup and Business Protection Suite families of software offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distribution operations including Backup/Restore, Data...

CA License Software GETCONFIG Buffer Overflow (CVE-2005-0581)

Computer Associates implements a license server/client mechanism in most of its products to provide control over product licenses. Normally a license server stores licences in a central location for centralized license management. This server is queried by clients for a valid a license in order t...

Design/Logic Flaw

The dnsdbfindrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service assertion failure and daemon exit via an ANY record in the prerequisite section o...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

CVE-2009-1889

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

CVE-2009-1491

McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a...

CVE-2009-1491

McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a...

Fedora 9 : udev-124-4.fc9 (2009-3712)

udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram oriented service, used to transfer information between kernel modules and...

Integer overflow

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...

CVE-2009-1119

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...

Ubuntu Update for gaim vulnerability USN-675-2

Ubuntu Update for Linux kernel vulnerabilities USN-675-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6752.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gaim vulnerability USN-675-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Design/Logic Flaw

Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service infinite loop via a Digital Audio Access Protocol DAAP message with a crafted Content-Length header...

CVE-2009-0247

The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side protection mechanisms against cross-site scripting XSS, which allows remote attackers to conduct XSS attacks by using a modified client to send a crafted IM message, related to the msg variable...

CVE-2008-4631

Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information...

Stack overflow

Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information...

Buffer overflow

Multiple buffer overflows in TIBCO Hawk 1 AMI C library libtibhawkami and 2 Hawk HMA tibhawkhma, as used in TIBCO Hawk before 4.8.1; Runtime Agent TRA before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute...

CVE-2008-3338

Multiple buffer overflows in TIBCO Hawk 1 AMI C library libtibhawkami and 2 Hawk HMA tibhawkhma, as used in TIBCO Hawk before 4.8.1; Runtime Agent TRA before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute...

DEBIAN-CVE-2008-2085

Multiple stack-based buffer overflows in the 1 getremoteipmedia and 2 getremoteipv6media functions in call.cpp in SIPp 3.1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted SIP message...

CVE-2008-2085

Multiple stack-based buffer overflows in the 1 getremoteipmedia and 2 getremoteipv6media functions in call.cpp in SIPp 3.1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted SIP message...

CVE-2008-1836

The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read...