9916 matches found
DSA-465 openssl - several vulnerabilities
Bulletin has no description...
[SECURITY] [DSA 464-1] New gdk-pixbuf packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 464-1 [email protected] http://www.debian.org/security/ Martin Schulze March 16th, 2004 http://www.debian.org/security/faq -...
Apache 2.0.x < 2.0.49 mod_ssl Plain HTTP Request DoS
The remote host appears to be running a version of Apache 2.0.x prior to 2.0.49. It is, therefore, affected by a denial of service vulnerability in the 'modssl' module. An attacker can exploit this to deny service to the Apache server. C Tenable Network Security, Inc. include"compat.inc"; if...
Microsoft Outlook fails to properly filter parameters passed via "mailto:" URL
Overview A vulnerability in the way that Microsoft Outlook 2002 handles a certain type of hyperlink could allow a remote attacker to execute arbitrary code on the vulnerable system. Description Microsoft Outlook provides a centralized application for managing and organizing e-mail messages,...
[Full-Disclosure] Adobe Acrobat Reader XML Forms Data Format Buffer Overflow
NGSSoftware Insight Security Research Advisory Name: Adobe Acrobat Reader XML Forms Data Format Buffer Overflow Systems Affected: Adobe Acrobat Reader version 5.1 Severity: High Risk Vendor URL: http://www.adobe.com/ Author: David Litchfield [email protected] Date Vendor Notified: 7th Februar...
DSA-450 linux-kernel-2.4.19-mips - several vulnerabilities
Bulletin has no description...
DSA-448 pwlib - several vulnerabilities
Bulletin has no description...
DSA-446 synaesthesia - insecure file creation
Bulletin has no description...
DSA-444 linux-kernel-2.4.17-ia64 - missing function return value check
Bulletin has no description...
DSA-438 linux-kernel-2.4.18-alpha+i386+powerpc - missing function return value check
Bulletin has no description...
Ecommerce Corp. Online Store Kit 3.0 Multiple Vulnerabilities
The remote host is running Ecommerce Corporation Online Store Kit, a web-based e-commerce CGI suite. There is a SQL injection vulnerability in the 'id' parameter of 'more.php'. This could allow a remote attacker to execute arbitrary SQL commands, which could be used to take control of the databas...
Crob FTP Server Connection Saturation Remote DoS
According to its version number, the remote Crob FTP server has a denial of service vulnerability. Repeatedly connecting and disconnecting causes the service to crash. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12060; scriptversion "1.20";...
SandSurfer < 1.7.0 User Authentication Bypass
The remote host is running SandSurfer, a web-based time keeping application. A vulnerability has been disclosed in all versions of this software, up to version 1.6.5 included that could allow an attacker to access the application without authenticating. %NASLMINLEVEL 70300 C Tenable Network...
Gallery 1.4.1 and below remote exploit vulnerability
Background Gallery is an open source image management system written in PHP. More information is available at http://gallery.sourceforge.net Description Starting in the 1.3.1 release, Gallery includes code to simulate the behaviour of the PHP 'registerglobals' variable in environments where that...
Mutt-1.4.2 fixes buffer overflow.
Mutt-1.4.2 has just been released; this version fixes a buffer overflow that can be triggered by incoming messages. There are reports about spam that has actually triggered this problem and crashed mutt. It is recommended that users of mutt versions prior to 1.4.2 upgrade to this version, or appl...
Important: Red Hat Security Advisory: mailman security update
Updated mailman packages that close a DoS vulnerability present in mailman versions prior to version 2.1 are now available. Mailman is a mailing list manager. Matthew Galgoci of Red Hat discovered a Denial of Service DoS vulnerability in versions of Mailman prior to 2.1. An attacker could send a...
DSA-435 mpg123 - heap overflow
Bulletin has no description...
DSA-427 linux-kernel-2.4.17-mips+mipsel - missing boundary check
Bulletin has no description...
[OpenCA Advisory] Vulnerability in signature verification
OpenCA Security Advisory 16 January 2004 Vulnerability in signature validation ===================================== A flaw in OpenCA before version 0.9.1.7 could cause OpenCA to accept a signature from a certificate if the certificate's chain is trusted by the chain directory of OpenCA. This mea...