PT-2008-5158 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.2 and 12.4 Description: The issue is related to a Denial of Service DoS attack from specially crafted packets in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS. This can cause memory...

DEBIAN-CVE-2008-3972

pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of...

Design/Logic Flaw

pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of...

CVE-2008-3972

pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of...

CVE-2008-2326: Improper Input Validation

mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service NULL pointer dereference and application crash by resolving a crafted .local domain name that contains a long label...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RHEL 5 : bind (RHSA-2008:0300)

"Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementatio...

mozilla: multiple file input focus stealing vulnerabilities

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."...

Memory corruption

Unspecified vulnerability in the Supervisor Engine 32 Sup32, Supervisor Engine 720 Sup720, and Route Switch Processor 720 RSP720 for multiple Cisco products, when using Multi Protocol Label Switching MPLS VPN and OSPF sham-link, allows remote attackers to cause a denial of service blocked queue,...

CVE-2008-0537

The CVE-2008-0537 entry concerns Cisco IOS-based platforms (Catalyst 6500 Series and Cisco 7600 Router devices) running Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), or Route Switch Processor 720 (RSP720). The vulnerability occurs when OSPF Sham-Link and MPLS VPN are enabled, allo...

Fedora 8 : krb5-1.6.2-14.fc8 (2008-2647)

This update incorporates fixes included in MITKRB5-SA-2008-001 use of uninitialized pointer / double-free in the KDC when v4 compatibility is enabled and MITKRB5-SA-2008-002 incorrect handling of high-numbered descriptors in the RPC library. This update also incorporates less-critical fixes for a...

Spoofing

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."...

CVE-2008-0414

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."...

CVE-2008-0414

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."...

Null pointer dereference

OpenBSD 4.2 allows local users to cause a denial of service kernel panic by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabelid2name function is not checked...

security flaw

The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated ...

security flaw

The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated ...

Sun Solaris可信扩展标签服务本地拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris 10可信扩展标签服务存在两个安全问题，本地攻击者可以利用漏洞使服务停止响应，导致拒绝服务攻击。 当此问题触发时，所有存在的可信桌面会话会挂起，非特权用户不能登录受影响的可信系统，目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10sparc 补丁下载： Sun Solaris 10sparc Sun Sun Solaris Patch 126448-04 SPARC...

Unfixed XSS vulnerability at www.labelwinsolutions.com

Security researcher Narcoticxs, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.labelwinsolutions.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/09/2007. It is...

IBM Rational ClearQuest Web Login Bypass SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== IBM Rational ClearQuest Web Login Bypass SQL Injection Vulnerability ====================================================================...