571 matches found
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service
source: https://www.securityfocus.com/bid/30013/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users by crashing affected servers. OpenLDAP 2.3.41 is vulnerable to this issue; earlier versions back to approximatel...
freetype security update
CentOS Errata and Security Advisory CESA-2008:0556 Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 25th June 2008 Th...
Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076
Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer
acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author...
Airscanner Mobile Security Advisory #07122001: Eye-Fi Multiple Vulnerabilities
Airscanner Mobile Security Advisory 07122001: Eye-Fi Solution Multiple Vulnerabilities Product: Eye-Fi 1.1.2 Platform: NA Requirements: NA Credits: Seth Fogie Airscanner Mobile Security http://www.airscanner.com December 20, 2007 Risk Level: Medium - Spoofed image injection, redirection of upload...
SuSE 10 Security Update : cups (ZYPP Patch Number 3716)
The previous cups update CVE-2007-0720 was incomplete and could lead to cupsd crashing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29411;...
SuSE 10 Security Update : tar (ZYPP Patch Number 4171)
This update fixes a bug in function safernamesuffix of tar which leads to a crashing stack. Exploitability is unknown. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
SuSE 10 Security Update : cpio (ZYPP Patch Number 4184)
This update fixes a bug in function safernamesuffix of cpio which leads to a crashing stack. Exploitability is unknown. CVE-2007-4476 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...
Fedora 8 : tar-1.17-4.fc8 (2007-2800)
Wed Oct 24 2007 Radek Brich 2:1.17-4 - upstream patch for CVE-2007-4476 tar stack crashing in safernamesuffix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...
Fedora 7 : tar-1.15.1-28.fc7 (2007-2673)
Wed Oct 24 2007 Radek Brich 2:1.15.1-28 - backported upstream patch for CVE-2007-4476 tar stack crashing in safernamesuffix - Tue Aug 28 2007 Radek Brich 2:1.15.1-27 - fixed CVE-2007-4131 tar directory traversal vulnerability 253684 Note that Tenable Network Security has extracted the preceding...
openSUSE 10 Security Update : tar (tar-4170)
This update fixes a bug in function safernamesuffix of tar which leads to a crashing stack. Exploitability is unknown. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tar-4170. The text...
openSUSE 10 Security Update : cpio (cpio-4180)
This update fixes a bug in function safernamesuffix of cpio which leads to a crashing stack. Exploitability is unknown. CVE-2007-4476 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cpio-4180...
GLSA-200709-14 : ClamAV: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200709-14 ClamAV: Multiple vulnerabilities Nikolaos Rangos discovered a vulnerability in ClamAV which exists because the recipient address extracted from email messages is not properly sanitized before being used in a call to...
DEBIAN-CVE-2007-4476
Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."...
Buffer overflow
Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."...
CVE-2007-4476
Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."...
CVE-2007-4476
Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."...
CVE-2007-4476: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."...
asa-2007-015.rb.txt
!/usr/bin/env ruby author = tenkeiev Script to test chaniax for the vuln in ASA-2007-015 Trigger subtypes of 11 or 12 will crash an unpatched server First establish a call - send new, recv accept, send ack, recv answer, send ack Then send IAX2 control packets with subtypes 0x0b or 0x0c that conta...
[Full-disclosure] firefox 2.0.0.2 crash
Can be dupe but in fast browsing over topics I did not discovered this exploit: http://people.zoy.org/sam/firefox-crash-save-session-before-clicking.gif I do NOT know anything else than this url. Just seen it in random discussion and anyone else I asked knows nothing. Current tests indicate that...