5707 matches found
libmodplug: multiple vulnerabilities reported in <= 0.8.8.3
Off-by-one error in the CSoundFile::ReadAMS2 function in src/loadams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted AMS file with a large number of instruments...
PT-2013-1400 · Xen +1 · Xen +1
Name of the Vulnerable Software and Affected Versions: Xen versions 3.3 and earlier Description: The issue is related to an off-by-one error in the addr ok macro, which can be exploited by local 64-bit PV guest administrators to cause a denial of service, resulting in a host crash. This can be...
rsyslog Long Tag Off-By-Two DoS
This module triggers an off-by-two overflow in the rsyslog daemon. This flaw is unlikely to yield code execution but is effective at shutting down a remote log daemon. This bug was introduced in version 4.6.0 and corrected in 4.6.8/5.8.5. Compiler differences may prevent this bug from causing any...
RHEL 6 : rsyslog (RHSA-2011:1247)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1247 advisory. - rsyslog: parseLegacySyslogMsg off-by-two buffer overflow CVE-2011-3200 Note that Nessus has not tested for this issue but has instead relied only o...
Kernel.org Server Rooted and 448 users credentials compromised
Kernel.org Server Rooted and 448 users credentials compromised The main kernel.org page is currently carrying a notice that the site has suffered a security breach. "Earlier this month, a number of servers in the kernel.org infrastructure were compromised. We discovered this August 28th. While we...
WordPress Super CAPTCHA plugin <= 2.2.4 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Super CAPTCHA plugin = 2.2.4 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/super-capcha.2.2.4.zip Version: 2.2.4 tested...
SuSE9 Security Update : clamav (YOU Patch Number 12821)
New clamav 0.9.7 packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 It also brings other enhancements, support for signatures based on SHA1 and SHA256, better error detection, as well as speed and memory optimizations. The complete list of changes is...
SuSE 11.1 Security Update : ClamAV (SAT Patch Number 4942)
New clamav packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...
OpenTTD -- Denial of service via improperly validated commands
The OpenTTD Team reports: Multiple off-by-one errors in ordercmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted CMDINSERTORDER command...
SuSE 10 Security Update : ClamAV (ZYPP Patch Number 7661)
New clamav packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...
libmodplug: Fixed multiple vulnerabilities reported in <= 0.8.8.3 (important)
This update of libmodplug0 fixes the following issues: 1 An integer overflow error exists within the "CSoundFile::ReadWav" function src/loadwav.cpp when processing certain WAV files. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted WA...
DEBIAN-CVE-2011-2698
Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...
CVE-2011-2698
Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...
CVE-2011-2698
Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...
kernel: ext4: kernel panic when writing data to the last block of sparse file
Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service BUGON and system crash by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsign...
ClamAV < 0.97.2 'cli_hm_scan' Denial of Service
According to its version, the ClamAV clamd antivirus daemon on the remote host is earlier than 0.97.2. As such, it is potentially affected by a denial of service vulnerability. An off-by-one error exists in the 'clihmscan' function in the file 'libclamav/matcher-hash.c' that can be exploited by a...
cPanel 11.x Fantastico LFI Vulnerability and Security Bypass
Exploit for php platform in category web applications cPanel 11.x Fantastico LFI Exploit Vulnerability Security Bypass +Version.: cPanel 11.x +Author : ahwak2000 +Home : 1337day.com + Date : 11.08.2011 + E-mail : z.u5athotmail.com +Tested On : win xp sp3 After you log in the cPanel - LFI eXploit:...
CentOS Update for httpd CESA-2009:1108 centos3 i386
Check for the Version of httpd OpenVAS Vulnerability Test CentOS Update for httpd CESA-2009:1108 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CentOS Update for apr-util CESA-2009:1107 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
DEBIAN-CVE-2011-2721
Off-by-one error in the clihmscan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service daemon crash via an e-mail message that is not properly handled during certain hash calculations...