94 matches found
Fedora 10 : perl-5.10.0-73.fc10 (2009-7680)
This security update fixes an off-by-one overflow in Compress::Raw::Zlib CVE-2009-1391 Moreover, it contains a subtle change to the configuration that does not affect the Perl interpreter itself, but fixes the propagation of the chosen options to the modules. For example, a rebuild of perl-Wx...
Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit
Exploit for linux platform in category local exploits ======================================================================= Linux Kernel include include include include include include sys/sock...
RedHat Security Advisory RHSA-2009:1108
The remote host is missing updates announced in advisory RHSA-2009:1108. The Apache HTTP Server is a popular Web server. The httpd package shipped with Red Hat Enterprise Linux 3 contains an embedded copy of the Apache Portable Runtime APR utility library, a free library of C data structures and...
Fedora Core 11 FEDORA-2009-6033 (perl)
The remote host is missing an update to perl announced via advisory FEDORA-2009-6033. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
RedHat Security Advisory RHSA-2009:1107
The remote host is missing updates announced in advisory RHSA-2009:1107. apr-util is a utility library used with the Apache Portable Runtime APR. It aims to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for...
Fedora Core 11 FEDORA-2009-6033 (perl)
The remote host is missing an update to perl announced via advisory FEDORA-2009-6033. OpenVAS Vulnerability Test $Id: fcore20096033.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6033 perl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
RedHat Security Advisory RHSA-2009:1108
The remote host is missing updates announced in advisory RHSA-2009:1108. The Apache HTTP Server is a popular Web server. The httpd package shipped with Red Hat Enterprise Linux 3 contains an embedded copy of the Apache Portable Runtime APR utility library, a free library of C data structures and...
RedHat Security Advisory RHSA-2009:1107
The remote host is missing updates announced in advisory RHSA-2009:1107. apr-util is a utility library used with the Apache Portable Runtime APR. It aims to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR. Including support for...
apr security update
CentOS Errata and Security Advisory CESA-2009:1107 Updated apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. apr-util is a utility library...
Moderate: Red Hat Security Advisory: httpd security update
Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. The httpd package shipped with Red Hat...
Fedora 11 : perl-5.10.0-69.fc11 (2009-6033)
Off-by-one overflow in Compress::Raw::Zlib CVE-2009-1391 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
Apache Httpd < 2.2.12 : APR-util off-by-one overflow
An off-by-one overflow flaw was found in the way the bundled copy of the APR-util library processed a variable list of arguments. An attacker could provide a specially-crafted string as input for the formatted output conversion routine, which could, on big-endian platforms, potentially lead to th...
Debian Security Advisory DSA 1201-1 (ethereal)
The remote host is missing an update to ethereal announced via advisory DSA 1201-1. Several remote vulnerabilities have been discovered in the Ethereal network scanner. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4574 It was discovered that the MIM...
DSA-1322-1 wireshark
Bulletin has no description...
CVE-2007-1886
Integer overflow in the strreplace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one overflow."...
PHP str_ireplace DoS
$Data = strireplace"n", "br", $Data; can cause PHP engine to crash Because of off-by-one overflow...
Debian DSA-1201-1 : ethereal - several vulnerabilities
Several remote vulnerabilities have been discovered in the Ethereal network scanner. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4574 It was discovered that the MIME multipart dissector is vulnerable to denial of service caused by an off-by-one...
modrewritepoc.txt
Public release date of POC/Exploit: 2006-08-20 Author: Jacobo Avariento Gimeno CVE id: CVE-2006-3747 Bugtraq id: 19204 CERT advisory: VU395412 Severity: high Introduction ---- On July 28 2006 Mark Dowd McAfee Avert Labs reported a vulnerability found in modrewrite apache module to the bugtraq...
Multiple Wireshark (Ethereal) sniffer security vulnerabilities
Multiple DoS conditions IPSec ESP dissector off-by-one overflow...
[SECURITY] [DSA 1127-1] New ethereal packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1127-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 28th, 2006 http://www.debian.org/security/faq -...