BIND: Multiple vulnerabilities

Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description Multiple cache poisoning vulnerabilities were discovered in BIND. For further information please consult the CVE entries and the ISC Security Bulletin referenced below. Note:...

CVE-2010-1628

Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter...

DEBIAN-CVE-2010-1628

Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter...

Ghostscript Parser Buffer Overflow Vulnerabilities (Windows)

This host is installed with Ghostscript and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbghostscriptparserbofvulnwin.nasl 5306 2017-02-16 09:00:16Z teissa $ Ghostscript Parser Buffer Overflow Vulnerabilities Windows Authors: Antu Sanadi Updated By: Antu Sanadi on...

Multiple memory corruption vulnerabilities in Ghostscript

=============================================================== Ghostscript, multiple arbitrary code execution vulnerabilities May 11, 2010 CVE-2010-1869 =============================================================== ==Description== Ghostscript www.ghostscript.com, an interpreter for the...

openSUSE Security Update : acl (acl-1803)

the setfacl tool followed symbolic links in recursive -R mode even if the --physical -P option was specified CVE-2009-4411. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update acl-1803. The text...

openSUSE Security Update : acl (acl-1803)

the setfacl tool followed symbolic links in recursive -R mode even if the --physical -P option was specified CVE-2009-4411. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update acl-1803. The text...

ISC BIND 9 DNSSEC NSEC/NSEC3 Bogus NXDOMAIN Responses

According to its version number, the remote installation of BIND suffers from a cache poisoning vulnerability. The vulnerability exists due to an error in DNSSEC NSEC/NSEC3 validation code which could cause caching of bogus NXDOMAIN responses without correctly validating them. This issue affects...

setfacl / getfacl symbolic links vulnerability

Symbolic links are followed on recursive operation...

CVE-2009-4411

The 1 setfacl and 2 getfacl commands in XFS acl 2.2.47, when running in recursive -R mode, follow symbolic links even when the --physical aka -P or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack...

DEBIAN-CVE-2009-4411

The 1 setfacl and 2 getfacl commands in XFS acl 2.2.47, when running in recursive -R mode, follow symbolic links even when the --physical aka -P or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack...

CVE-2009-4411

The 1 setfacl and 2 getfacl commands in XFS acl 2.2.47, when running in recursive -R mode, follow symbolic links even when the --physical aka -P or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack...

CVE-2009-4411

The 1 setfacl and 2 getfacl commands in XFS acl 2.2.47, when running in recursive -R mode, follow symbolic links even when the --physical aka -P or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack...

[SECURITY] Fedora 10 Update: wget-1.12-2.fc10

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

[SECURITY] Fedora 11 Update: wget-1.12-2.fc11

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

[SECURITY] Fedora 12 Update: wget-1.12-2.fc12

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

XM Easy Personal FTP Server File/Folder Denial of Service Vulnerability

This host is running XM Easy Personal FTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbxmeasyftpdircreatedosvuln.nasl 4970 2017-01-09 15:00:59Z teissa $ XM Easy Personal FTP Server File/Folder Denial of Service Vulnerability Authors: Sujit Ghosal...

XM Easy Personal FTP Server File/Folder Denial of Service Vulnerability

XM Easy Personal FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BIND DNS Nameserver, DNSSEC validation Vulnerability

Overview A vulnerability exists in the way BIND 9 handles recursive client queries that may cause additional records to be added to its cache. Description BIND 9 contains a vulnerability in the way recursive client queries are handled. According to ISC:A nameserver with DNSSEC validation enabled...

Mozilla Foundation Security Advisory 2009-54

Mozilla Foundation Security Advisory 2009-54 Title: Crash with recursive web-worker calls Impact: Critical Announced: October 27, 2009 Reporter: Orlando Berrera Products: Firefox 3.5 Fixed in: Firefox 3.5.4 Description Security researcher Orlando Berrera of Sec Theory reported that recursive...