CVE-2008-2944

Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux RHEL 5 and Fedora Core 6 FC6 allows local users to cause a denial of service oops, as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than...

CVE-2008-2943

The CVE-2008-2943 entry concerns IBM Tivoli Directory Server (TDS) 6.1.0.0–6.1.0.15, where a double-free vulnerability can be triggered via LDAP operations. The underlying issue is a double-free in the LDAP processing path when attempting to create a duplicate ibm-globalAdminGroup entry, which re...

CVE-2008-2943

Double free vulnerability in IBM Tivoli Directory Server TDS 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service ABEND and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry. NOTE:...

Remote CVS <= 1.11.15 (error_prog_name) Remote Exploit

No description provided by source. Remote CVS = 1.11.15 exploit for the errorprogname double free vuln. by Gyan Chawdhary, [email protected] Vulnerability Description: The Vulnerability lies in the serveargumentx function. The Argumentx command parameter is used to append data to a previously...

DEBIAN-CVE-2008-0891

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service crash via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information...

CVE-2008-0891

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service crash via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information...

CVE-2008-1927

Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service memory corruption and crash via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems...

CVE-2008-1927

Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service memory corruption and crash via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems...

CVE-2008-1927

CVE-2008-1927 : A double-free in Perl 5.8.8’s regular expression engine with Unicode/UTF-8 patterns can cause memory corruption and crash (denial of service). Affected advisories reference patching Perl (e.g., MiracleLinux AXSA-2008-74:01) and rely on updated Perl packages; remediation is via ven...

CVE-2008-1617

Double free vulnerability in Web TransferCtrl Class 8,2,1,4 iManFile.cab, as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null...

CVE-2008-1617

Double free vulnerability in Web TransferCtrl Class 8,2,1,4 iManFile.cab, as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null...

Debian: Security Advisory (DSA-1530-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1530-1 : cupsys - Several vulnerabilities

Several local/remote vulnerabilities have been discovered in cupsys, the Common Unix Printing System. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0047 Heap-based buffer overflow in CUPS, when printer sharing is enabled, allows remote attackers t...

DSA-1530-1 cupsys - multiple vulnerabilities

Bulletin has no description...

MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2008-001 MIT krb5 Security Advisory 2008-001 Original release: 2008-03-18 Last update: 2008-03-18 Topic: double-free, uninitialized data vulnerabilities in krb5kdc CVE-2008-0062 VU895609 Use of a null or dangling pointer in the MIT Kerberos...

CVE-2008-0597

CVE-2008-0597 involves a use-after-free in CUPS prior to 1.1.22 exploited by crafted UDP IPP packets, allowing a remote attacker to crash the CUPS daemon (DoS). Related issues CVE-2008-0596 and CVE-2008-0882 describe additional memory-management flaws (double-free/memory leak) that can crash or e...

Double free

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

CVE-2008-0882

CVE-2008-0882 affects CUPS 1.3.5, where a double-free in process_browse_data can be triggered by crafting UDP Browse packets to cupsd (port 631/udp). This remote flaw may cause daemon crash (DoS) and potentially arbitrary code execution; the description notes involvement with a remote printer. Mu...