9915 matches found
PT-2003-1879 · Apache · Apache +1
Name of the Vulnerable Software and Affected Versions: Apache versions prior to 2.0.48 Description: The issue arises from the mishandling of CGI redirect paths by mod cgid when a threaded Multi-Processing Module MPM is used. This could cause Apache to send the output of a CGI program to the wrong...
Hummingbird CyberDOCS vulnerable to SQL injection
Overview Hummingbird CyberDOCS contains an SQL injection vulnerability that could allow a remote attacker to execute SQL commands. Description Hummingbird CyberDOCS Hummingbird DM is a web-based enterprise document management solution that runs on Windows NT/2000 using SQL database technology. Th...
[SECURITY] [DSA-393-1] New OpenSSL packages correct denial of service issues
Package : openssl Vulnerability : denial of service Problem-Type : remote Debian-specific: no CVE Ids : CAN-2003-0543 CAN-2003-0544 Dr. Stephen Henson [email protected], using a test suite provided by NISCC www.niscc.gov.uk, discovered a number of errors in the OpenSSL ASN1 code. Combined with an...
DSA-393 openssl - denial of service
Bulletin has no description...
[SECURITY] [DSA-390-1] New marbles packages fix buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 390-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 26th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-390-1] New marbles packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 390-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 26th, 2003 http://www.debian.org/security/faq -...
Mplayer Buffer Overflow
Favorite Linux Media Player Buffer Overflow Product: Mplayer Developers: http://www.mplayerhq.hu OS: Port to All NIX and Win32 Remote Exploitable: YES Developers has been contacted, problem was fixed, recomended update your mplayer version. In the source tree there is a file called asfstreaming.c...
DSA-390 marbles - buffer overflow
Bulletin has no description...
PT-2003-1878 · Openssh +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 3.7.1 through 3.7.1p1 Description: The issue concerns the PAM conversation function, which incorrectly interprets an array of structures as an array of pointers. This misinterpretation allows attackers to modify the stack,...
PHP < 4.3.3 Multiple Vulnerabilities
The remote host is running a version of PHP that is older than 4.3.3. All versions of PHP 4 older than 4.3.3 contain multiple integer overflow vulnerabilities that may allow an attacker to execute arbitrary commands on this host. Another problem may also invalidate safemode. %NASLMINLEVEL 70300 C...
DSA-388 kdebase - several vulnerabilities
Bulletin has no description...
[ESA-20030916-023] OpenSSH buffer management error.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------+ | Guardian Digital Security Advisory September 16, 2003 | | http://www.guardiandigital.com ESA-20030916-023 | | | | Packages: openssh, openssh-clients, openssh-server | |...
SRT2003-09-11-1200 - setgid man MANPL overflow
The full version of this advisory can be found at. http://www.secnetops.com/research/advisories/SRT2003-09-11-1200.txt Quick Summary: Advisory Number : SRT2003-09-11-1200 Product : Andries Brouwer man Version : Version =1.5m1 Vendor : ftp://ftp.win.tue.nl/pub/linux-local/utils/man Class : Local...
Important: Red Hat Security Advisory: : Updated pine packages fix vulnerabilities
Updated Pine packages that resolve remotely exploitable security issues are now available. Pine, developed at the University of Washington, is a tool for reading, sending, and managing electronic messages including mail and news. A buffer overflow exists in the way unpatched versions of Pine prio...
DSA-378 mah-jong - buffer overflows, denial of service
Bulletin has no description...
Moderate: Red Hat Security Advisory: : Updated httpd packages fix Apache security vulnerabilities
Updated httpd packages that fix several minor security issues are now available for Red Hat Linux 8.0 and 9. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Ben Laurie found a bug in the optional renegotiation code in modssl included with Apache 2...
DSA-377 wu-ftpd - insecure program execution
Bulletin has no description...
DSA-374 libpam-smb - buffer overflow
Bulletin has no description...
Low: Red Hat Security Advisory: gdm security update
Updated GDM packages are available which correct a local crash if XDMCP is enabled. GDM is the GNOME Display Manager for X. Two bugs have been found in the X Display Manager Control Protocol XDMCP which could allow a denial of service attack DoS by crashing the gdm daemon. The Common...