CVE-2006-0261

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB07 in the Dictionary component and 2 DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed...

CVE-2006-0261

CVE-2006-0261 affects Oracle Database Server versions 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5, linked to two Oracle vulnerabilities (DB07 in Dictionary; DB14 in Oracle Label Security) with unspecified impact/attack vectors. A note states researchers claim DB07 involves plaintext storage of the TD...

security flaw

The IPv6 flow label handling code ip6flowlabel.c in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service crash by triggering a free of non-allocated memory...

CVE-2005-0038

The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop...

SUSE-SA:2005:068: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:068 kernel. The Linux kernel was updated to fix several security problems and several bugs, listed below: Security fixes: - CVE-2005-3783: A check in ptrace2 handling that finds out if a process is attaching to itself was incorrec...

CVE-2005-3973

Multiple cross-site scripting XSS vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote attackers to inject arbitrary web script or HTML via various HTML tags and values, such as the 1 legend tag and the value parameter used in 2 label and 3 input tags, possibly due t...

CVE-2005-3806

The IPv6 flow label handling code ip6flowlabel.c in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service crash by triggering a free of non-allocated memory...

CVE-2005-3806

The IPv6 flow label handling code ip6flowlabel.c in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service crash by triggering a free of non-allocated memory...

CVE-2005-3806

CVE-2005-3806 affects Linux kernels 2.4 (up to 2.4.32) and 2.6 (before 2.6.14); IPv6 flow label handling in ip6_flowlabel.c may modify the wrong variable, enabling local attackers to corrupt kernel memory or trigger a crash by freeing non-allocated memory. Connected advisories (Debian DSA-1018-1/...

CVE-2005-3806

The IPv6 flow label handling code ip6flowlabel.c in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service crash by triggering a free of non-allocated memory...

CVE-2005-3438

Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln 1 DB04 in Change Data Capture; 2 DB06 in Data Guard Logical Standby; 3 DB10 in Locale; 4 DB12 in Materialized Views; 5 DB13 in Objects Extension; 6 DB15 in...

CVE-2005-3438

Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln 1 DB04 in Change Data Capture; 2 DB06 in Data Guard Logical Standby; 3 DB10 in Locale; 4 DB12 in Materialized Views; 5 DB13 in Objects Extension; 6 DB15 in...

security flaw

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted 1 BGP packet, which is not properly handled by RTROUTINGINFO, or 2 LDP packet, which is not properly handled by the ldpprint function...

security flaw

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted 1 BGP packet, which is not properly handled by RTROUTINGINFO, or 2 LDP packet, which is not properly handled by the ldpprint function...

Oracle 10g Exploit dbms_scheduler SESSION_USER issue

Name DBMSSCHEDULER SESSIONUSER issue in Oracle 10g Systems Affected Oracle 10g Severity Medium Risk Category Switch Oracle Username to user SYS Vendor URL http://www.oracle.com/ Credit Oracle Metalink Forum 633336.995 Exploit...

DEBIAN-CVE-2005-1279

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted 1 BGP packet, which is not properly handled by RTROUTINGINFO, or 2 LDP packet, which is not properly handled by the ldpprint function...

Cisco IOS Multi Protocol Label Switching (MPLS) Packet Remote DoS (CSCeb56909)

The remote version of IOS is vulnerable to a denial of service attack when processing malformed MPLS packets. If IPv6 is enabled, an attacker may exploit this flaw to prevent the router from working properly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17630;...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

CVE-2005-0197

Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching MPLS installed but disabled, allows remote attackers to cause a denial of service device reload via a crafted packet sent to the disabled interface...

Cisco Security Advisory: Crafted Packet Causes Reload on Cisco Routers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Crafted Packet Causes Reload on Cisco Routers Revision 1.0 For Public Release 2005 January 26 1600 GMT - -------------------------------------------------------------------------- Contents Summary Affected Products Details...