ViewVC Detection

This host is running ViewVC, a browser interface for CVS and Subversion version control repositories. OpenVAS Vulnerability Test $Id: viewvcdetect.nasl 5744 2017-03-28 07:25:23Z cfi $ ViewVC Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free...

ViewVC Detection

This host is running ViewVC, a browser interface for CVS and Subversion version control repositories. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

[SECURITY] Fedora 10 Update: viewvc-1.0.9-1.fc10

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

[SECURITY] Fedora 10 Update: subversion-1.6.4-2.fc10

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

OpenSSL dtls1_retrieve_buffered_fragment()函数握手消息拒绝服务漏洞

BUGTRAQ ID: 35417 CVECAN ID: CVE-2009-1387 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL在接收到带有非预期序列号的握手消息时会将其传送给dtls1processoutofseqmessage函数。如果序列号低于预期值，这个函数会丢弃数据；如果为之后的消息，函数会缓冲数据。在丢弃数据时，消息碎片长度保持为0，说明没有缓冲任何数据。由于检查长度所用的错误if条件，有时会缓冲没有数据但长度为丢弃消息长度的碎片，之后在进行处理的时候会导致总线错误。 OpenSSL 0.9.x...

OpenSSL DTLS报文多个拒绝服务漏洞

Bugraq ID: 35001 CVE ID：CVE-2009-1378 CVE-2009-1377 CNCVE ID：CNCVE-20091378 CNCVE-20091377 OpenSSL是一款开放源码的SSL实现，用来实现网络通信的高强度加密。 OpenSSL存在多个漏洞，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 -OpenSSL库没有正确限制缓冲DTLS记录的数值，提交特殊构建的DTLS报文可导致消耗所有内存。 -处理DTLS消息时存在错误，通过发送大量乱序的握手消息可消耗大量内容。 OpenSSL Project OpenSSL 0.9.8 k OpenSSL...

Eggdrop/Windrop 1.6.19 - ctcpbuf Remote Crash

eggdrop/windrop remote crash vulnerability This message: Message body More options Related messages: Next message Previous message Next in thread Replies From: Thomas Sader Date: Fri, 15 May 2009 05:54:08 +0200 Affected software ----------------- eggdrop 1.6.19 only, not 1.6.19+ctcpfix windrop...

[DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

Debian Security Advisory DSA 1777-1 (git-core)

The remote host is missing an update to git-core announced via advisory DSA 1777-1. OpenVAS Vulnerability Test $Id: deb17771.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1777-1 git-core Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD : cvs -- numerous vulnerabilities (d2102505-f03d-11d8-81b0-000347a4fa7d)

A number of vulnerabilities were discovered in CVS by Stefan Esser, Sebastian Krahmer, and Derek Price. - Insufficient input validation while processing 'Entry' lines. CVE-2004-0414 - A double-free resulting from erroneous state handling while processing 'Argumentx' commands. CVE-2004-0416 -...

FreeBSD : CVS path validation errors (0792e7a7-8e37-11d8-90d1-0020ed76ef5a)

Two programming errors were discovered in which path names handled by CVS were not properly validated. In one case, the CVS client accepts absolute path names from the server when determining which files to update. In another case, the CVS server accepts relative path names from the client when...

Mandriva Update for gtk+2.0 MDKSA-2007:039 (gtk+2.0)

Check for the Version of gtk+2.0 OpenVAS Vulnerability Test Mandriva Update for gtk+2.0 MDKSA-2007:039 gtk+2.0 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for viewvc FEDORA-2008-8270

Check for the Version of viewvc OpenVAS Vulnerability Test Fedora Update for viewvc FEDORA-2008-8270 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[Full-disclosure] Secunia Research: OpenSG Radiance RGBE Buffer Overflow Vulnerability

====================================================================== Secunia Research 20/01/2009 - OpenSG Radiance RGBE Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Debian DSA-1684-1 : lcms - multiple vulnerabilities

Two vulnerabilities have been found in lcms, a library and set of commandline utilities for image color management. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5316 Inadequate enforcement of fixed-length buffer limits allows an attacker to...

PHP 5.2.6 (error_log) safe_mode Bypass Vulnerability

No description provided by source. SecurityReason.com PHP 5.2.6 errorlog safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 securityreason.com Date: - - Written: 10.11.2008 - - Public: 20.11.2008 SecurityReason Research SecurityAlert Id: 57 CWE: CWE-264 SecurityRisk: Medium Affected Software...

PHP 5.2.6 - error_log Safe_mode Bypass

PHP 5.2.6 - errorlog Safemode Bypass SecurityReason.com PHP 5.2.6 errorlog safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 securityreason.com Date: - - Written: 10.11.2008 - - Public: 20.11.2008 SecurityReason Research SecurityAlert Id: 57 CWE: CWE-264 SecurityRisk: Medium Affected...

[SECURITY] Fedora 8 Update: viewvc-1.0.6-1.fc8

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

Gentoo Security Advisory GLSA 200405-12 (cvs)

The remote host is missing updates announced in advisory GLSA 200405-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200406-06 (CVS)

The remote host is missing updates announced in advisory GLSA 200406-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...