FreeBSD Security Advisory (FreeBSD-SA-04:10.cvs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:10.cvs.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-04:07.cvs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:07.cvs.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-05:05.cvs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:05.cvs.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Ports: cvs+ipv6

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

NetBSD PPPoE发现脚本远程拒绝服务漏洞

BUGTRAQ ID:30838 CNCAN ID：CNCAN-2008082706 NetBSD是一款基于BSD的操作系统。 NetBSD包含的pppoe4代码处理恶意报文存在问题，远程攻击者可以利用漏洞触发内核访问越界内容而导致内核崩溃，造成拒绝服务攻击。 在客户端和访问集中器之间的会话连接之前，处理PPPoE连接的早期状态的关键代码存在问题。在"discovery"阶段的报文由多个可变长度"tags"装载同一个PPPoE报文中，每个标签将被检查，而且针对全部报文大小的长度进行了验证。不过在长度检查过程中存在一个缺陷，允许把下一个TAG的指针越界移动到报文后最多4字节的位置。...

Fedora 9 : gallery2-2.2.5-1.fc9 (2008-5576)

Wed Jun 18 2008 John Berninger - 2.2.5-1 - update to upstream 2.2.5 for security vulns - Tue Apr 22 2008 John Berninger - 2.2.4-4 - update version for tag conflict due to devel build prior to update of cvs checkout Note that Tenable Network Security has extracted the preceding description block...

CVS Remote Entry Line Root Heap Overflow Exploit

No description provided by source. include stdio.h include string.h include unistd.h include stdlib.h include sys/types.h include signal.h include sys/socket.h include netinet/in.h include stdarg.h include netdb.h include errno.h include sys/time.h include fcntl.h include zlib.h define CVSPORT 24...

Remote CVS <= 1.11.15 (error_prog_name) Remote Exploit

No description provided by source. Remote CVS = 1.11.15 exploit for the errorprogname double free vuln. by Gyan Chawdhary, [email protected] Vulnerability Description: The Vulnerability lies in the serveargumentx function. The Argumentx command parameter is used to append data to a previously...

ViewVC Direct Request CVSROOT Information Disclosure

The remote host is running ViewVC, a web-based tool for browsing CVS and Subversion repositories. The version of ViewVC installed on the remote host allows the reading of the contents of the 'CVSROOT' directory by navigating to it directly. An attacker could leverage this issue to retrieve...

GLSA-200803-29 : ViewVC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-29 ViewVC: Multiple vulnerabilities Multiple unspecified errors were reportedly fixed by the ViewVC development team. Impact : A remote attacker could send a specially crafted URL to the server to list CVS or SVN commits on...

[SECURITY] Fedora 8 Update: viewvc-1.0.5-1.fc8

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

[SECURITY] Fedora 7 Update: viewvc-1.0.5-1.fc7

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

DSECRG-08-007.txt

DSECRG-08-007 Digital Security Research Group DSecRG Advisory Application: OpenBSD BGPD daemon Versions Affected: OpenBSD 4.1 Vendor URL: http://openbsd.org Bugs: XSS Exploits: YES Reported: 10.10.2007 Vendor response: 10.10.2007 Date of Public Advisory: 31.01.2008 Authors: Alexandr Polyakov, Ant...

Debian Security Advisory DSA 233-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 233-1. OpenVAS Vulnerability Test $Id: deb2331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 233-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 517-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 517-1. OpenVAS Vulnerability Test $Id: deb5171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 517-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 505-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 505-1. OpenVAS Vulnerability Test $Id: deb5051.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 505-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 802-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 802-1. OpenVAS Vulnerability Test $Id: deb8021.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 802-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 486-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 486-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-265)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 505-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 505-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...