CVE-2010-1145

CVE-2010-1145 is a duplicate of CVE-2009-4498. The connected sources provide concrete details for the underlying issue: Zabbix Server before version 1.8 contains an arbitrary command execution vulnerability in the node_process_command() function (nodehistory.c). An unauthenticated, remote attacke...

Fedora Core 11 FEDORA-2009-12575 (cacti)

The remote host is missing an update to cacti announced via advisory FEDORA-2009-12575. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 11 : cacti-0.8.7e-3.fc11 (2009-12575)

This fix contains several official patches from cacti: Command Line Add Graphs Syntax SNMP Invalid Responses Template Import/Export Duplication Cross-Site Scripting Fixes http://www.cacti.net/downloadpatches.php Note that Tenable Network Security has extracted the preceding description block...

kernel security update

CentOS Errata and Security Advisory CESA-2009:1522 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 21st July 20...

Null pointer dereference

The sgbuildindirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service kernel OOPS and NULL pointer dereference, as demonstrated by using xcdroast to duplicate a CD...

CVE-2009-3288

The sgbuildindirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service kernel OOPS and NULL pointer dereference, as demonstrated by using xcdroast to duplicate a CD...

CVE-2009-2645

CVE-2009-2645 is rejected/not used; duplicate of CVE-2009-2408, not an active vulnerability entry.

CVE-2009-1205

CVE-2009-1205 is a duplicate of CVE-2007-4475 (per its description). The connected records provide concrete details for CVE-2007-4475: a stack-based buffer overflow in SAP GUI’s EAI WebViewer3D ActiveX control (webviewer3d.dll) before SAP GUI 7.10 Patch Level 9. The vulnerability allows remote co...

CVE-2008-1383

The docert function in ssl-cert.eclass, when used by srccompile or srcinstall on Gentoo Linux, stores the SSL key in a binpkg, which allows local users to extract the key from the binpkg, and causes multiple systems that use this binpkg to have the same SSL key and certificate...

CVE-2007-6705

The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESSDUPHANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly...

CVE-2007-6590

CVE-2007-6590 is rejected/not used; duplicate of CVE-2008-2809; references removed.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6120. Reason: This candidate is a duplicate of CVE-2007-6120. Notes: All CVE users should reference CVE-2007-6120 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6440

CVE-2007-6440 is rejected; use CVE-2007-6112 instead.

CVE-2007-4015

CVE-2007-4015 is a duplicate of CVE-2007-0011. The connected records describe Citrix Access Gateway (Citrix Advanced Access Control) web portal behavior that places a session ID in the URL, enabling context-dependent attackers to hijack sessions by reading residual information (referer log, brows...

CVE-2006-1538

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

[Full-disclosure] [HV-INFO] Enova hardware encryption: false sense of security

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Enova hardware encryption: False sense of security Classification: =============== Level: Informational ID: HEXVIEW200603281 URL: http://www.hexview.com/docs/20060328-1.txt Overview: ========= Enova Technology is a manufacturer of the X-Wall ASIC that...

CVE-2006-0390

CVE-2006-0390 is rejected and not used; refer to CVE-2005-4504.

crypt_blowfish cryptographic problem

Salt generation algorithm has high probability of salt duplication...

CVE-2002-2151

CVE-2002-2151 is a duplicate of CVE-2002-1651. The authoritative entry describes a Cross-site scripting (XSS) vulnerability in Verity Search97 that allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages fr...

CVE-2004-2404

CVE-2004-2404 is a duplicate of CVE-2004-2347. Connected records show that the affected product is Leif M. Wright Web Blog (versions 1.1 and 1.1.5). The vulnerability is remote command execution via shell metacharacters (e.g., |) in the file parameter of ViewFile requests, indicating improper han...