UBUNTU-CVE-2014-0477

The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

CVE-2014-0477

CVE-2014-0477 affects the Perl Email::Address module prior to version 1.905, where an inefficient regular expression in the RFC 2822 address parser allows a remote attacker to trigger CPU consumption and deny service. Public advisories (Fedora, openSUSE, Mandriva/MDVSA, RedHat, Debian) document u...

CVE-2014-0477: Undefined Security Weakness

The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

Netscape 7.0 JavaScript Regular Expression Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6959/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when executing certain JavaScript methods. If a malicious page containing a specially crafted JavaScript regul...

Tiki Wiki CMS Groupware <= 8.2 (snarf_ajax.php) Remote PHP Code Injection

No description provided by source. ------------------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.2 snarfajax.php Remote PHP Code Injection ------------------------------------------------------------------------- author...........: Egidio Romano aka EgiX...

Web Help Desk by SolarWinds - Stored XSS

No description provided by source. Author: loneferret of Offensive Security Product: Web Help Desk by SolarWinds Version: 11.0.7 older versions may be affected Vendor Site: http://www.webhelpdesk.com Software Download: http://www.webhelpdesk.com/help-desk-software/ Discovered: August 18th 2012...

FreeIPS 1.0 Protected Service Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10541/info It is reported that FreeIPS is susceptible to a denial of service vulnerability. FreeIPS scans TCP connections for particular strings, defined by regular expressions. If a packet matches the regular expression,...

Red Hat 8/9 Directory Server Crafted Search Pattern Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30871/info Red Hat Directory Server is prone to a denial-of-service vulnerability because the server fails to handle specially crafted search patterns. An attacker can exploit this issue to consume CPU resources with one...

DenyHosts: Denial of service

Background DenyHosts is a script intended to be run by Linux system administrators to help thwart SSH server attacks. Description DenyHosts does not properly define the regular expressions used when parsing SSH authentication logs. Impact A remote attacker could possibly cause a Denial of Service...

openSUSE Security Update : dhcp (openSUSE-2011-68)

Applied security fix for a DoS due to processing certain regular expressions, extracted from 4.2.3-P1 bnc735610, CVE-2011-4539 : - Add a check for a NULL pointer before calling the regexec function. Without out this check we could, under some circumstances, pass a NULL pointer to the regexec...

openSUSE Security Update : dhcp (openSUSE-SU-2011:1318-1)

Specially crafted requests could crash dhcpd if the server used regular expressions for matching CVE-2011-4539. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dhcp-5532. The text description ...

openSUSE Security Update : seamonkey (openSUSE-SU-2012:0007-1)

seamonkey version 2.6 fixes several security issues : - MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards - MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library - MFSA 2011-55/CVE-2011-3658: nsSVGValue out-of-bounds access - MFSA...

openSUSE Security Update : bind (openSUSE-2013-297)

bind was updated to 9.9.2-P2, fixing a security issue in regular expression handling. CVE-2013-2266 RT 32688 https://kb.isc.org/article/AA-00871 bnc811876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : MozillaFirefox / MozillaThunderbird / seamonkey / etc (openSUSE-2011-101)

Mozilla Firefox and Thunderbird version 9 and seamonkey version 2.6 updates fix several security issues : - MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards - MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library - MFSA...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-5050)

Mozilla Thunderbird was updated to 3.1.12 fixing various bugs and security issues : Mozilla Foundation Security Advisory 2011-32 MFSA 2011-32 http://www.mozilla.org/security/announce/2011/mfsa2011-32.html Many of the issues listed below are not exploitable through mail since JavaScript is disable...

openSUSE Security Update : dhcp (openSUSE-SU-2013:0619-1)

The ISC dhcp server was updated to fix a denial of service attack via regular expressions : - Removed regex.h check from configure in bind sources bnc811934, CVE-2013-2266. Make the bind export library build output visible. dhcp-4.2.4-P2-no-bind-regex-check.CVE-2013-2266.diff Also fixed : - Added...

Batch site DNS zone transfer vulnerability detection-bash shell implemented-vulnerability warning-the black bar safety net

0x00 background The following illustration of eecs. cc author self-built a machine with a private root DNS server, and open the zone transfer permissions, so the results: the cc zone transfer success. The figure is just an experimental verification, the following article started! ! 2 0 1 4 0 5 1 ...

[SECURITY] Fedora 19 Update: mutt-1.5.23-2.fc19

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

[SECURITY] Fedora 20 Update: mutt-1.5.23-2.fc20

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

Fedora Update for mutt FEDORA-2014-5880

Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2014-5880 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...