SuSE 10 Security Update : OpenSSH (ZYPP Patch Number 5627)

Due to a faulty signal handler repeated login attempts could exhaust the maximum allowed connections and prevent further logins. CVE-2008-4109 A problem where utmp entries where not deleted when users logged out was also fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

Simple PHP Blog config/users.php Arbitrary User Password Hash Disclosure

The version of Simple PHP Blog installed on the remote host allows an unauthenticated, remote attacker to retrieve information about non-admin users defined to the application, including their user names and password hashes, which could in turn be used to gain access to the application. While the...

CVE-2004-1553

creationtimestamp| type| source ---|---|--- 2008-09-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6357 2008-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6420...

USN-637-1: Linux kernel vulnerabilities

It was discovered that there were multiple NULL-pointer function dereferences in the Linux kernel terminal handling code. A local attacker could exploit this to execute arbitrary code as root, or crash the system, leading to a denial of service. CVE-2008-2812 The dochangetype routine did not...

CVE-2008-3918

creationtimestamp| type| source ---|---|--- 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6232 2013-08-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27771...

CVE-2008-3431

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6218 2020-06-17 19:20:47+00:00| seen| MISP/5eea648c-6088-4f01-bf29-6af3ac13a7a7 2020-06-22 13:30:58+00:00| seen| https://t.me/cyberbannewsir/909 2020-10-09 13:47:08+00:00| seen|...

CVE-2008-4425

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6215 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6231 2009-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8105...

CVE-2008-3668

creationtimestamp| type| source ---|---|--- 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32199 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32202 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32203 2008-08-09...

USN-627-1: Dnsmasq vulnerability

Dan Kaminsky discovered weaknesses in the DNS protocol as implemented by Dnsmasq. A remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic...

USN-622-1: Bind vulnerability

Dan Kaminsky discovered weaknesses in the DNS protocol as implemented by Bind. A remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic...

Movable Type session management vulnerability

Overview Movable Type, a web log system from Six Apart KK, contains a vulnerability which could allow a remote attacker to gain illegal access. Impact A remote attacker could freely manipulate a web log by posting or deleting blog entries. Solution None...

CVE-2008-2104

The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check...

CVE-2008-2104

The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check...

CVE-2008-1985

creationtimestamp| type| source ---|---|--- 2008-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31701 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10427...

CVE-2008-2037

creationtimestamp| type| source ---|---|--- 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31662 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31660 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31664 2008-04-17...

CVE-2008-6206

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31611 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31610...

DEBIAN-CVE-2008-1612

The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...

Input validation

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified 1 computer...

CVE-2008-1118

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified 1 computer...

CVE-2008-1118

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified 1 computer...