9921 matches found
LG Electronics LG3100p router
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Issue: ----------------------------------------------------------------| LG Electronics LR3100p is a small WAN router, with two WAN interfaces and one Ethernet. It comes with no access lists defined, which enables administrator to connect to port 23/t...
CVE-2002-0852
Cisco VPN Client 3.5.4 and earlier is affected by CVE-2002-0852 due to buffer overflows in IKE processing. The vulnerability allows remote attackers to cause a denial of service by sending crafted IKE traffic, specifically (1) an IKE message with a large Security Parameter Index (SPI) payload and...
CVE-2002-0854
The CVE-2002-0854 entry documents a buffer overflow in the ISDN Point to Point Protocol daemon (ipppd) of the i4l package, affecting SuSE 7.3 and 8.0 (and possibly other OSes). The underlying issue is a buffer overflow in ipppd, which could allow local users to gain privileges. The connected reco...
SuSE Security Announcement: i4l (SuSE-SA:2002:030)
-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: i4l Announcement-ID: SuSE-SA:2002:030 Date: Mon Aug 12 11:00:00 CEST 2002 Affected products: 7.3, 8.0, SuSE Linux Database Server, SuSE eMail Server 3.1, SuSE eMail Server III, SuSE Firewall Adminhost VPN, SuSE Linux Admin-CD...
[SECURITY] [DSA 148-1] New hylafax packages fix security related problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 148-1 [email protected] http://www.debian.org/security/ Martin Schulze August 12th, 2002 - -------------------------------------------------------------------------- Package : hylafax...
CVE-2002-0468
Buffer overflows in Ecartis formerly Listar 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via 1 a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf in 2 moderate.c, 3 lcgi.c, 4 fileapi.c, 5 cookie.c, 6 codes.c, o...
CVE-2002-0427
Buffer overflows in fpexec in modfrontpage before 1.6.1 may allow attackers to gain root privileges...
CVE-2002-0821
Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via 1 the BGP dissector, or 2 the WCP dissector...
Multiple vendors' Internet Key Exchange (IKE) implementations do not properly handle IKE response packets
Overview Internet Key Exchange IKE implementations from several vendors contain buffer overflows and denial-of-service conditions. The buffer overflow vulnerabilities could permit an attacker to execute arbitrary code on a vulnerable system. Description The CERT/CC has received a report describin...
Buffer overflows in Content Managment Server
Multipel buffer overflows...
Important: Red Hat Security Advisory: openssl security update
Updated OpenSSL packages are available for Red Hat Linux Advanced Server. These updates fix multiple protocol parsing bugs, which may cause a denial of service DoS attack or cause SSL-enabled applications to crash. Updated 06 Jan 2003 Added fixed packages for the ia64 architecture. Updated 06 Feb...
FreeBSD-SA-02:33.openssl
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:33.openssl Security Advisory The FreeBSD Project Topic: openssl contains multiple vulnerabilities Category: core Module: crypto/openssl Announced: 2002-08-05 Credits: A.L...
CVE-2002-0656
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via 1 a large client master key in SSL2 or 2 a large session ID in SSL3...
Advisory CA-2002-23 Multiple Vulnerabilities In OpenSSL
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-23 Multiple Vulnerabilities In OpenSSL Original release date: July 30, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected OpenSSL prior to 0.9.6e, up to and including...
Multiple bugs in JanaServer
Multiple vulnerabilities including buffer overflows...
SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities.
Security Advisory Name: SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities. System Affected : Sql Server 2000 all Service Packs. Severity : High. Author: Cesar Cerrudo. Date: 07/25/2002 Advisory Number: CC070205 Overview: Database Consistency Checkers DBCCs are command console...
Microsoft SQL Server contains buffer overflows in several Database Consistency Checkers
Overview Microsoft SQL Server ships with several administrative tools that allow database users to elevate their administrative privileges from a single database to all databases on the server. Description Microsoft SQL Server ships with several utilities known as Database Consistency Checkers...
Important: Red Hat Security Advisory: squid security update
New Squid packages are available which fix various issues. Squid is a high-performance proxy caching server. The following summary describes the various issues found and fixed: Several buffer overflows have been found in the MSTN auth helper msntauth when configured to use denyusers or allowusers...