SuSE 10 Security Update : MySQL (ZYPP Patch Number 5618)

Empty bit-strings in a query could crash the MySQL server. CVE-2008-3963 Due to another flaw users could access tables of other users. CVE-2008-4097 / CVE-2008-4098 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

BELL-CVE-2008-4445 CVE-2008-4445 does not affect BellSoft software

Bulletin has no description...

Gentoo Security Advisory GLSA 200411-06 (MIME-tools)

The remote host is missing updates announced in advisory GLSA 200411-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL Empty Binary String DoS

Binary data 4652.prm...

Xerox Phaser 8400 - Remote Reboot (Denial of Service)

Xerox Phaser 8400 - Remote Reboot Denial of Service !/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently...

Code injection

Unspecified vulnerability in the HP System Administration Manager SAM on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify arbitrary files, related to an "empty systems list."...

DEBIAN-CVE-2008-3196

skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack...

ikiwiki空口令绕过认证漏洞

BUGTRAQ ID: 29479 CVECAN ID: CVE-2008-0169 Ikiwiki是一个wiki编译器，可将wiki页面转换为可在网站发布的HTML页面。 Ikiwiki在处理访问认证时存在漏洞，如果在Ikiwiki中启用了openid和passwordauth插件的话（默认配置），用户就可以通过带有空口令的登录请求绕过认证限制登录，访问openid相关帐号。 ikiwiki ikiwiki 2.48 ikiwiki ikiwiki 1.34 ikiwiki ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-0169

Plugin/passwordauth.pm aka the passwordauth plugin in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence...

CVE-2008-0169

Plugin/passwordauth.pm aka the passwordauth plugin in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence...

DEBIAN-CVE-2008-0169

Plugin/passwordauth.pm aka the passwordauth plugin in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence...

FreeBSD : ikiwiki -- empty password security hole (09066828-2ef1-11dd-a0d8-0016d325a0ed)

The ikiwiki development team reports : This hole allowed ikiwiki to accept logins using empty passwords to openid accounts that didn't use a password. Upgrading to a non-vulnerable ikiwiki version immediatly is recommended if your wiki allows both password and openid logins. %NASLMINLEVEL 70300 C...

ikiwiki -- empty password security hole

The ikiwiki development team reports: This hole allowed ikiwiki to accept logins using empty passwords to openid accounts that didn't use a password. Upgrading to a non-vulnerable ikiwiki version immediatly is recommended if your wiki allows both password and openid logins...

BELL-CVE-2008-2148 CVE-2008-2148 does not affect BellSoft software

Bulletin has no description...

CVE-2008-1880

The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password...

GLSA-200804-24 : DBmail: Data disclosure

The remote host is affected by the vulnerability described in GLSA-200804-24 DBmail: Data disclosure A vulnerability in DBMail's authldap module when used in conjunction with an Active Directory server has been reported by vugluskr. When passing a zero length password to the module, it tries to...

CVE-2007-6714

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...

CVE-2007-6714

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...

Authentication flaw

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...

InterVideo WinDVD Media Center远程拒绝服务漏洞

BUGTRAQ ID: 28016 WinDVD Media Center是DVD、视频、音乐和照片的软件网络媒体播放器。 WinDVD Media Center的InterVideo IMC Server（IMCSvr.exe）和InterVideo Home Theater（IHT.exe）服务中存在空指针引用漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 如果远程攻击者向这些服务发送了包含有两个换行符的特制报文的话，就可能触发这个漏洞，导致受影响的进程崩溃。 InterVideo WinDVD Media Center 2.11.15.0 InterVideo ---------...