Ubuntu 5.04 / 5.10 : linux-source-2.6.10, linux-source-2.6.12 vulnerabilities (USN-281-1)

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

CVE-2006-0034

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or...

Heap overflow

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or...

CVE-2006-0034

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or...

USN-281-1: Linux kernel vulnerabilities

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

Code injection

Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of service via crafted DNS responses messages that cause 1 a buffer over-read or 2 infinite recursion, which can trigger a segmentation fault or invalid memory access, ...

CVE-2006-2023

Integer overflow in the RTSPmsglen function in rtsp/RTSPmsglen.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service application crash via a large HTTP Content-Length value, which leads to an invalid memory access...

Integer overflow

Integer overflow in the RTSPmsglen function in rtsp/RTSPmsglen.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service application crash via a large HTTP Content-Length value, which leads to an invalid memory access...

CVE-2006-2023

Integer overflow in the RTSPmsglen function in rtsp/RTSPmsglen.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service application crash via a large HTTP Content-Length value, which leads to an invalid memory access...

DEBIAN-CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

CVE-2006-1630

The CVE-2006-1630 issue affects ClamAV prior to version 0.88.1. The vulnerability is an invalid memory access within the cli_bitset_set() function in libclamav/others.c, which can allow a remote attacker to trigger a denial of service. A fix is available in 0.88.1 and later releases; upgrading to...

CVE-2006-1630: Undefined Security Weakness

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

CVE-2006-1593

The 1 ZDMissingPlayer, 2 ZDUseItem, and 3 ZDLoadNewClientLevel functions in svmain.cpp for a Zdaemon 1.08.01 and b X-Doom allows remote attackers to cause a denial of service crash via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array...

Code injection

The 1 ZDMissingPlayer, 2 ZDUseItem, and 3 ZDLoadNewClientLevel functions in svmain.cpp for a Zdaemon 1.08.01 and b X-Doom allows remote attackers to cause a denial of service crash via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array...

CVE-2006-1593

The 1 ZDMissingPlayer, 2 ZDUseItem, and 3 ZDLoadNewClientLevel functions in svmain.cpp for a Zdaemon 1.08.01 and b X-Doom allows remote attackers to cause a denial of service crash via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array...

CVE-2006-1593

The CVE-2006-1593 entry affects sv_main.cpp in Zdaemon 1.08.01 and X-Doom, specifically the functions ZD_MissingPlayer, ZD_UseItem, and ZD_LoadNewClientLevel. The issue allows remote attackers to cause a denial of service (crash) by supplying an invalid player slot or item number, leading to an i...

CVE-2006-1593: Undefined Security Weakness

The 1 ZDMissingPlayer, 2 ZDUseItem, and 3 ZDLoadNewClientLevel functions in svmain.cpp for a Zdaemon 1.08.01 and b X-Doom allows remote attackers to cause a denial of service crash via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array...

Integer overflow

Integer signedness error in the enetprotocolhandleincomingcommands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including 1 Cube, 2 Sauerbraten, and 3 Duke3dw32, allows remote attackers to cause a denial of service application crash via a packet wi...