908 matches found
iG Shop 1.0 (eval/sql injection) Multiple Remote Vulnerabilities
No description provided by source. "If eval is the answer, then you are asking the wrong question." --Unknowen ig-shop suffers from two eval's that can be controlled by an attacker: http://127.0.0.1/igshop/cart.php?action=;phpinfo;// ./cart.php line 692: eval "cart$action;";...
Solaris 2.6 (sparc) : 106646-03
The remote host is missing Sun Security Patch number 106646-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Jan 08 03:39:58 MST 2003 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...
Solaris 7 (sparc) : 106646-03
The remote host is missing Sun Security Patch number 106646-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Jan 08 03:39:58 MST 2003 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...
Solaris 2.6 (i386) : 106647-03
The remote host is missing Sun Security Patch number 106647-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Dec 08 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...
Solaris 2.5.1 (i386) : 106647-03
The remote host is missing Sun Security Patch number 106647-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Dec 08 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...
Solaris 7 (i386) : 106541-42
SunOS 5.7x86: tr dumps core with locale de and KJP 106541-07 or newer. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C...
Solaris 7 (i386) : 106647-03
The remote host is missing Sun Security Patch number 106647-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Dec 08 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...
CVE-2006-4434
Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...
[Full-disclosure] rPSA-2006-0122-1 kernel
rPath Security Advisory: 2006-0122-1 Published: 2006-07-07 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Deterministic Denial of Service Updated Versions: kernel=/conary.rpath.com@rpl:devel//1/2.6.16.24-0.1-1 References:...
Possible privilege escalation through prctl() and suid_dumpable
The suiddumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service disk consumption and possibly gain privileges via the PRSETDUMPABLE argument of the prctl function and a program that causes a core dump fi...
GLSA-200606-19 : Sendmail: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200606-19 Sendmail: Denial of Service Frank Sheiness discovered that the mime8to7 function can recurse endlessly during the decoding of multipart MIME messages until the stack of the process is filled and the process crashes. Impa...
Sendmail fails to handle malformed multipart MIME messages
Overview Sendmail does not properly handle malformed multipart MIME messages. This vulnerability may allow a remote, unauthenticated attacker to cause a denial-of-service condition. Description Sendmail Sendmail is a widely used mail transfer agent MTA. Mail Transfer Agents MTA MTAs are responsib...
DEBIAN-CVE-2006-1173
Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and migh...
CVE-2002-1786
SGI IRIX 6.5–6.5.14 is affected. The issue is that root core dumps receive a umask of 022, allowing local users to read core dumps and possibly obtain sensitive information. Impact: partial confidentiality of dumped data. Affected component: core dump handling on IRIX; root-owned dumps. Root caus...
CVE-2002-1786: Undefined Security Weakness
SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information...
AIX 5.2 : IY55360
The remote host is missing AIX Critical Security Patch number IY55360 DTLOGIN CORE DUMPS WITH SPECIFIC XDMCP REQUEST. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
AIX 5.2 : IY44203
The remote host is missing AIX Critical Security Patch number IY44203 syslogd core dumps if required rotation of multiple. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
BitchX DoS
Certain channel mode changes would cause BitchX to core consistantly...
