Snort 2.8.5 IPv6 Remote Denial Of Service

============================================= - Date: October 22th, 2009 - Discovered by: Laurent Gaffié - Severity: Low ============================================= I. VULNERABILITY ------------------------- Snort TCP 2 works x86,x64 /usr/bin/env python from scapy.all import z = "Q" 30...

[oCERT-2009-016] Poppler, xpdf integer overflow during heap allocation

2009-016 Poppler, Xpdf integer overflows during heap allocation Description: Poppler and Xpdf are two popular open source projects for processing PDF files. Both projects are vulnerable to an integer overflow during heap memory allocation when processing a PDF file. In general, this results in...

Sympa 'sympa.pl' Insecure Temporary File Creation Vulnerability

Sympa creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete...

SLES11: Security update for libtiff3

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libtiff3 More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 2009...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql-devel mysql mysql-Max For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for multipath-tools

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: multipath-tools For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5046186 within...

HTTPDX h_handlepeer() Function Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in HTTPDX HTTP server 1.4. The vulnerability is caused due to a boundary error within the "hhandlepeer" function in http.cpp. By sending an overly long HTTP request, an attacker can overrun a buffer and execute arbitrary code. Modul...

HP LaserJet printers - 存储型xss

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple...

Mozilla Bugzilla 'Bug.search()' WebService Function SQL Injection Vulnerability

Bugzilla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

neon: billion laughs DoS attack

neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...

ProFTP 2.9 (welcome message) Remote Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3...

Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2009:221)

Multiple vulnerabilities has been found and corrected in libneon0.27 : neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

CVE-2009-2473

neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...

CVE-2009-2473

neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...

Fedora Core 10 FEDORA-2009-7750 (mediawiki)

The remote host is missing an update to mediawiki announced via advisory FEDORA-2009-7750. OpenVAS Vulnerability Test $Id: fcore20097750.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7750 mediawiki Authors: Thomas Reinke Copyright: Copyright c 200...

Squid Multiple Remote Denial of Service Vulnerabilities

Squid is prone to multiple remote denial-of-service vulnerabilities. Successfully exploiting these issues allow remote attackers to crash the affected application, denying further service to legitimate users. This issue affects Squid 3.0.STABLE16, 3.1.0.11 and prior versions. OpenVAS Vulnerabilit...

Fedora 11 : mediawiki-1.15.1-48.fc11 (2009-7785)

This update upgrades mediawiki code to 1.15.1 and fixes some path references. Upstream comments: This is a security and bugfix release of MediaWiki 1.15.1 and 1.14.1. A cross-site scripting XSS vulnerability was discovered. Only versions 1.14.0, 1.15.0 and release candidates for those releases ar...

CVE-2009-1725: Undefined Security Weakness

WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit aka Qt toolkit; and possibly other products do not properly handle numeric character references, which allows remote attackers to...

CVE-2009-2259

CVE-2009-2259 is a duplicate of CVE-2009-2608 and should reference that entry. Connected records confirm that PHP Address Book 4.0.x contains multiple SQL injection vulnerabilities exploitable via delete.php (id) or index.php (alphabet), enabling remote arbitrary SQL commands. The root cause is u...

Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...