Lucene search
K

136 matches found

OSV
OSV
added 2012/11/21 11:55 p.m.1 views

UBUNTU-CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

6.8CVSS6.4AI score0.281EPSS
Exploits0References3
Prion
Prion
added 2012/11/21 11:55 p.m.10 views

Format string

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

6.8CVSS8.7AI score0.14864EPSS
Exploits0References5Affected Software1
Prion
Prion
added 2012/11/21 11:55 p.m.8 views

Stack overflow

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

6.8CVSS8.6AI score0.281EPSS
Exploits0References9Affected Software1
Prion
Prion
added 2012/11/21 11:55 p.m.10 views

Stack overflow

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

6.8CVSS8.4AI score0.58743EPSS
Exploits6References9Affected Software1
UbuntuCve
UbuntuCve
added 2012/11/21 11:55 p.m.23 views

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

6.8CVSS6.4AI score0.281EPSS
Exploits0References2
CVE
CVE
added 2012/11/21 11:0 p.m.47 views

CVE-2012-4426

MCrypt before and including version 2.6.8 contains multiple format-string vulnerabilities (CVE-2012-4426) that may allow a remote attacker to cause a crash or possibly execute arbitrary code via errors.c or mcrypt.c. The issue is documented across multiple sources (NVD, Debian/Ubuntu advisories, ...

6.8CVSS8.1AI score0.14864EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2012/11/21 11:0 p.m.17 views

CVE-2012-4426

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

7.9AI score0.14864EPSS
Exploits0References5
Cvelist
Cvelist
added 2012/11/21 11:0 p.m.13 views

CVE-2012-4409

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

7.6AI score0.58743EPSS
Exploits6References9
CVE
CVE
added 2012/11/21 11:0 p.m.49 views

CVE-2012-4527

CVE-2012-4527: MCrypt (mcrypt) up to version 2.6.8 is affected by a stack-based buffer overflow when handling long file names, enabling a user-assisted remote attacker to crash the process or potentially execute arbitrary code. The issue is documented across multiple advisories (Gentoo GLSA 20140...

6.8CVSS8AI score0.281EPSS
Exploits0References9Affected Software1
Debian CVE
Debian CVE
added 2012/11/21 11:0 p.m.16 views

CVE-2012-4426

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

6.8CVSS7.7AI score0.14864EPSS
Exploits0
Debian CVE
Debian CVE
added 2012/11/21 11:0 p.m.23 views

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

6.8CVSS7.9AI score0.281EPSS
Exploits0
CVE
CVE
added 2012/11/21 11:0 p.m.67 views

CVE-2012-4409

The CVE-2012-4409 issue affects MCrypt, specifically mcrypt versions up to and including 2.6.8, due to a flaw in the check_file_head() function (extra.c). A crafted header with long salt data during decryption can trigger a stack-based buffer overflow, enabling a user-assisted remote attacker to ...

6.8CVSS7.8AI score0.58743EPSS
Exploits6References9Affected Software1
Cvelist
Cvelist
added 2012/11/21 11:0 p.m.27 views

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

7.8AI score0.281EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2012/11/21 12:0 a.m.1 views

PT-2012-5460 · Mcrypt · Mcrypt

Name of the Vulnerable Software and Affected Versions: mcrypt versions 2.6.8 and earlier Description: The issue allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. It is not clear whether this is a vulnerability...

6.8CVSS7.3AI score0.281EPSS
Exploits0References16
OpenVAS
OpenVAS
added 2012/11/09 12:0 a.m.19 views

Fedora Update for mcrypt FEDORA-2012-17290

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-17290 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

6.8CVSS0.5AI score0.58743EPSS
Exploits6References2
OpenVAS
OpenVAS
added 2012/11/09 12:0 a.m.20 views

Fedora Update for mcrypt FEDORA-2012-17318

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-17318 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

6.8CVSS0.4AI score0.58743EPSS
Exploits6References2
OpenVAS
OpenVAS
added 2012/11/09 12:0 a.m.19 views

Fedora Update for mcrypt FEDORA-2012-17318

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.5AI score0.58743EPSS
Exploits6References2
OpenVAS
OpenVAS
added 2012/11/09 12:0 a.m.22 views

Fedora Update for mcrypt FEDORA-2012-17290

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.5AI score0.58743EPSS
Exploits6References2
Fedora
Fedora
added 2012/11/08 5:52 a.m.17 views

[SECURITY] Fedora 18 Update: mcrypt-2.6.8-10.fc18

MCrypt is a replacement for the old crypt package and crypt1 command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers...

6.8CVSS3.1AI score0.281EPSS
Exploits0
Fedora
Fedora
added 2012/11/08 1:59 a.m.30 views

[SECURITY] Fedora 17 Update: mcrypt-2.6.8-10.fc17

MCrypt is a replacement for the old crypt package and crypt1 command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers...

6.8CVSS3.1AI score0.58743EPSS
Exploits6
Rows per page
Query Builder