340 matches found
krb5 security update
1.8.2-3.4 - add upstream patches to fix standalone kpropd exiting if the per-client child process exits with an error, and hang or crash in the KDC when using the LDAP kdb backend CVE-2010-4022, CVE-2011-0281, CVE-2011-0282, 671101 1.8.2-3.3 - pull up crypto changes made between 1.8.2 and 1.8.3 t...
(libpurple): Multiple DoS (crash) flaws by processing of unsanitized Base64 decoder values
libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...
Fedora 14 : krb5-1.8.2-6.fc14 (2010-15803)
This update incorporates the upstream patch to fix an uninitialized pointer crash in the KDC's authorization data handling routines CVE-2010-1322. It also pulls up a few backports and compilation flag changes from F15. Note that Tenable Network Security has extracted the preceding description blo...
PT-2010-1701 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.32.6 Description: A race condition in the tty fasync function allows local users to cause a denial of service, potentially resulting in a system crash due to a NULL pointer dereference. The issue is related ...
FreeBSD : firefox -- Dangling pointer crash regression from plugin parameter array fix (c2eac2b5-9a7d-11df-8e32-000f20797ede)
The Mozilla Project reports : MFSA 2010-48 Dangling pointer crash regression from plugin parameter array fix %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...
krb5: null pointer dereference in GSS-API library leads to DoS (MITKRB5-SA-2010-005)
The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of...
NULL pointer crash in freeSSHd 1.20
Luigi Auriemma Application: freeSSHd http://www.freesshd.com Note: is possible that the problem affects also wodSSHServer anyway this has not been tested Versions: = 1.2.0 Platforms: Windows Bug: NULL pointer crash Exploitation: remote Date: 17 Feb 2008 Author: Luigi Auriemma e-mail:...
Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1
Luigi Auriemma Application: Ipswitch Instant Messaging http://www.ipswitch.com/products/instantmessaging Versions: = 2.0.8.1 Platforms: Windows Bugs: A pre-auth NULL pointer crash in decryption function B format string in logging C arbitrary empty files creation Exploitation: remote A versus both...
Multiple vulnerabilities in BarracudaDrive 3.7.2
Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary files deleting by users D NULL...
barracuda-multi.txt
Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary files deleting by users D NULL...
BarracudaDrive <= 3.7.2 Multiple Remote Vulnerabilities
No description provided by source. Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary...
barracudadrive 3.7.2 - Multiple Vulnerabilities
Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary files deleting by users D NULL...
barracudadrive 3.7.2 - Multiple Vulnerabilities
barracudadrive 3.7.2 - Multiple Vulnerabilities Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization...
BarracudaDrive <= 3.7.2 Multiple Remote Vulnerabilities
Exploit for unknown platform in category remote exploits ======================================================= BarracudaDrive = 3.7.2 Multiple Remote Vulnerabilities ======================================================= Luigi Auriemma Application: BarracudaDrive Web Server...
Apple iTunes DoS
NULL pointer crash on xml parsing...
[Full-disclosure] Buffer-overflow and NULL pointer crash in Genecys 0.2
Luigi Auriemma Application: Genecys http://www.genecys.org Versions: = 0.2 and current CVS Platforms: nix and BSD Bugs: A tellplayersurrchanges buffer-overflow B parsecommand NULL pointer crash Exploitation: remote, versus server Date: 12 May 2006 Author: Luigi Auriemma e-mail: [email protected]...
Mandrake Linux Security Advisory : kdegraphics (MDKSA-2006:012)
Multiple heap-based buffer overflows in the DCTStream::readProgressiveSOF and DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, allow user-complicit attackers to cause a denial of service heap corruption and possibly execute arbitrary code via...
Mandrake Linux Security Advisory : tetex (MDKSA-2006:011)
Multiple heap-based buffer overflows in the DCTStream::readProgressiveSOF and DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, allow user-complicit attackers to cause a denial of service heap corruption and possibly execute arbitrary code via...
Nstxd vulnerability
---------------------------------------------------------------------- Rstack Team Rstack.org --- Security Advisory Advisory Number: RSTACK-20040325 Subject: Nstxd remote DoS-Bug NULL-pointer-dereference Author: Laurent Oudot [email protected] Discovered: ... Published: March 25, 2004...
