WinFTP Server <= 2.3.0 PASV Command DoS Vulnerability

WinFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

php526-bypass.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SecurityReason.com PHP 5.2.6 errorlog safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 securityreason.com Date: - - Written: 10.11.2008 - - Public: 20.11.2008 SecurityReason Research SecurityAlert Id: 57 CWE: CWE-264 SecurityRisk: Medium Affect...

PHP 5.2.6 - error_log Safe_mode Bypass

PHP 5.2.6 - errorlog Safemode Bypass SecurityReason.com PHP 5.2.6 errorlog safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 securityreason.com Date: - - Written: 10.11.2008 - - Public: 20.11.2008 SecurityReason Research SecurityAlert Id: 57 CWE: CWE-264 SecurityRisk: Medium Affected...

CVE-2008-5161

Error handling in the SSH protocol in 1 SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1;...

CVE-2008-5161

Error handling in the SSH protocol in 1 SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1;...

CVE-2008-5161

CVE-2008-5161 is an SSH CBC-mode CBC vulnerability where error handling in CBC-based ciphers could allow remote attackers to recover plaintext from arbitrary SSH ciphertext blocks. The vulnerability affects multiple SSH implementations including OpenSSH 4.7p1 and various SSH clients/servers (as l...

Null pointer dereference

The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service NULL pointer dereference and child process crash via crafted HTTP headers, related to the "error handling mechanism."...

CVE-2008-3913

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

CVE-2008-3913

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

Design/Logic Flaw

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

[SECURITY] Fedora 9 Update: rpy-1.0.3-3.fc9

RPy provides a robust Python interface to the R programming language. It can manage all kinds of R objects and can execute arbitrary R functions. All the errors from the R language are converted to Python exceptions...

CVE-2008-3913

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

Anzio Web Print Object ActiveX Control Remote BOF Vulnerability

The host is running Anzio, which is prone to a heap-based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodanziowebprintobjbofvuln900115.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Anzio Web Print Object ActiveX Control Remote BOF Vulnerability Authors: Sharath S...

LibPNG &lt;= 1.2.5 png_jmpbuf() Local Buffer Overflow Exploit

No description provided by source. include stdio.h include stdlib.h include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is...

Design/Logic Flaw

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling."...

CVE-2008-3042

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling."...

CVE-2008-3042

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling."...

CVE-2008-3042

CVE-2008-3042 affects TYPO3 DAM Frontend (dam_frontend) extension ≤0.1.0. The vulnerability is described as an unspecified issue with unknown impact and attack vectors related to “Improper Error Handling.” The connected documents do not provide concrete exploit details, affected versions beyond t...

openSUSE 10 Security Update : kernel (kernel-5339)

This kernel update fixes the following security problems: CVE-2008-2136: A problem in SIT IPv6 tunnel handling could be used by remote attackers to immediately crash the machine. CVE-2008-1615: On x8664 a denial of service attack could be used by local attackers to immediately panic / crash the...

CVE-2008-2168

Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...