6269 matches found
Default configuration
The default configuration of the deployment descriptor aka web.xml in picketlink-sts.war in 1 the securitysaml quickstart, 2 the webserviceproxysecurity quickstart, 3 the web-console application, 4 the http-invoker application, 5 the gpd-deployer application, 6 the jbpm-console application, 7 the...
CVE-2010-2493
The default configuration of the deployment descriptor aka web.xml in picketlink-sts.war in 1 the securitysaml quickstart, 2 the webserviceproxysecurity quickstart, 3 the web-console application, 4 the http-invoker application, 5 the gpd-deployer application, 6 the jbpm-console application, 7 the...
CVE-2010-2493
The default configuration of the deployment descriptor aka web.xml in picketlink-sts.war in 1 the securitysaml quickstart, 2 the webserviceproxysecurity quickstart, 3 the web-console application, 4 the http-invoker application, 5 the gpd-deployer application, 6 the jbpm-console application, 7 the...
CVE-2010-2493
The JBoss Enterprise SOA Platform before version 5.0.2 is vulnerable due to a default configuration in the deployment descriptor (web.xml) within picketlink-sts.war . Specifically, the inclusion of GET and POST http-method elements across multiple components—including the security_saml quickstart...
Fedora 11 : tar-1.22-5.fc11 (2010-4306)
CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 - do not...
Fedora 12 : tar-1.22-12.fc12 (2010-4309)
CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 - do not...
CVE-2010-1636
The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...
Design/Logic Flaw
The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...
CVE-2010-1636
The CVE-2010-1636 issue affects the Linux kernel’s btrfs_ioctl_clone path (fs/btrfs/ioctl.c) where cloned file descriptors are not guaranteed to be opened for reading, allowing local users to read from a write-only descriptor. Affected: 2.6.29–2.6.32 (and possibly other versions). Impact: potenti...
CVE-2010-1636
The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...
mDNSResponder -- corrupted stack crash when parsing bad resolv.conf
Juli Mallett reports: mdnsd will crash on some systems with a corrupt stack and once that's fixed it will still leak a file descriptor when parsing resolv.conf. The crash is because scanf is used with %10s for a buffer that is only 10 chars long. The buffer size needs increased to 11 chars to hol...
OpenTTD Multiple Security bypass vulnerabilities
OpenTTD is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenTTD Multiple Security bypass vulnerabilities
This host is installed with OpenTTD and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenttdmultsecbypassvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ OpenTTD Multiple Security bypass vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...
CVE-2010-0406
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
CVE-2010-0406
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
Design/Logic Flaw
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
CVE-2010-0406
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
CVE-2010-0406
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
CVE-2010-0406
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
CVE-2010-0406: Undefined Security Weakness
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...