8182 matches found
OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow
Binary data 1989.prm...
CVE-2004-0375
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...
Apache < 2.2.9 Multiple Vulnerabilities
Binary data 4579.prm...
CVE-2004-0548
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the 1 "c" compress option or 2 "d" decompress option...
Mandrake Linux Security Advisory : rsync (MDKSA-2002:009)
Sebastian Krahmer of the SuSE Security Team performed an audit on the rsync tool and discovered that in several places signed and unsigned numbers were mixed, with the end result being insecure code. These flaws could be abused by remote users to write 0 bytes into rsync's memory and trick rsync...
CVE-2004-0742
Sun Java System Portal Server 6.2 formerly Sun ONE allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view...
FreeBSD : mailman XSS in user options page (102)
The following package needs to be updated: mailman %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg00263aa367a811d880e30020ed76ef5a.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
Remote DoS vulnerability in Linux kernel 2.6.x
Overview ----------- There is a remotely exploitable bug in all Linux kernel 2.6 series due to using incorrect variable type. Vulnerability is connected to netfilter subsystem and may cause DoS. It's disclosed only when using iptables with rules matching TCP options i.e. --tcp-option. There is...
Linux TCP options signed/unsigned conversions DoS
TCP option length over 127 bytes can cause infinit loop inside netfilter if options are used in filtering rules...
CVE-2004-0460
Buffer overflow in the logging capability for the DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via multiple hostname options in 1 DISCOVER, 2 OFFER, 3 REQUEST, 4 ACK, or 5 NAK messages,...
CVE-2004-0473
Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via 1 the "-f" option on Windows XP or 2 the "-n" option...
KDE URI Handler Vulnerabilities
Background The K Desktop Environment KDE is a powerful Free Software graphical desktop environment. KDE makes use of URI handlers to trigger various programs when specific URLs are received. Description The telnet, rlogin, ssh and mailto URI handlers in KDE do not check for '-' at the beginning o...
CVE-2004-0370
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic...
libgcc contains multiple flaws that allow integer type range vulnerabilities to occur at runtime
Overview The libgcc runtime for the gcc and g++ compilers contain multiple flaws that can result in integer type range vulnerabilities in programs that are compiled using the -ftrapv option. Description Both gcc and g++ provide an -ftrapv compiler option that, according to the gcc man page,...
Symantec personal firewalls DoS
TCP packets with some options of zero langth causes system to hang...
EEYE: Symantec Multiple Firewall TCP Options Denial of Service
Symantec Multiple Firewall TCP Options Denial of Service Release Date: April 23, 2004 Date Reported: March 9th, 2004 Severity: High Remote Denial of Service Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2003 Symantec Norton Internet Security 2004 Symantec Norton Internet...
[VulnWatch] [SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability
Microsoft Windows Utility Manager Vulnerability April 13, 2004 Risk Level: High Summary: A local elevation of privileges vulnerability exists on the Windows Utility Manager that allows to any user to take complete control over the operating system. Versions Affected: All products in the Windows...
FreeBSD-SA-04:06.ipv6
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:06.ipv6 Security Advisory The FreeBSD Project Topic: setsockopt2 IPv6 sockets input validation error Category: core Module: kernel Announced: 2004-03-29...