6162 matches found
Dopewars 1.5.12 Server Denial of Service
Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111n^^Acfoon^AV65536n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the application. Discovered by Doug Prostko...
Medium security hole in TekRADIUS
Hi, I've identified a couple of security flaws affecting the TekRADIUS radius server for Windows which may allow privilege escalation. These issues were reported by email to the vendor and have I believe been resolved. Tim -- Tim Brown mailto:[email protected]...
CVE-2009-2186
Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that "was previously resolved in Shockwave Player 11.0.0.465."...
poppler security update
0.5.4-4.4.el53.9 - Another fix of integer overflows. - Adds memory-allocation.patch. - Resolves: 490707 0.5.4-4.4.el53.8 - Change calling of exit to exit. - Adds exit-handling.patch. - Resolves: 490707 0.5.4-4.4.el53.7 - Improve handling of EOF at JBIG2Stream.cc. - Adds eof-handling.patch. -...
CVE-2009-0362
filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...
CVE-2009-0362
filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...
Nortel Business Communications Manager 3.5 / 3.6 Default Password (deprecated)
Binary data 4883.prm...
eZ Publish < 3.9.5/3.10.1/4.0.1 Privilege Escalation Exploit
No description provided by source. ?php / eZ Publish privilege escalation exploit by s4avrd0w [email protected] Versions affected = 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info:...
Critical Vulnerability in Apple Quicktime’s Indeo Codec
http://www.ngssoftware.com/advisories/critical-vulnerability-in-apple-quicktimes-indeo-codec/ Paul Byrne of NGSSoftware has discovered a critical vulnerability in Apple Quicktime's implementation of the Indeo Codec CVE-ID: CVE-2008-3615 which may allow an attacker to execute arbitrary code on a...
Fixed XSS vulnerability at achtsoft.shops-24.com
Security researcher Fabian Fingerle, has submitted on 08/03/2008 a cross-site-scripting XSS vulnerability affecting achtsoft.shops-24.com, which at the time of submission ranked 6401011 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008...
setroubleshoot security and bug fix update
setroubleshoot: 2.0.5-3.0.1.el5 - replace missed references to bugzilla.redhat.com with linux.oracle.com 2.0.5-3 - Resolve: bug 436564: socket.getsockopt on ppc generates exception Fix typo in original setroubleshoot-getcredentials.patch 2.0.5-2 - Resolve: bug 437857: python error in system...
Debian Security Advisory DSA 1503-2 (kernel-source-2.4.27 (2.4.27-10sarge7))
The remote host is missing an update to kernel-source-2.4.27 2.4.27-10sarge7 announced via advisory DSA 1503-2. OpenVAS Vulnerability Test $Id: deb15032.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1503-2 kernel-source-2.4.27 2.4.27-10sarge7 Authors:...
Debian Security Advisory DSA 102-2 (at)
The remote host is missing an update to at announced via advisory DSA 102-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SOL4532 - gzip vulnerabilities CAN-2005-0758, CAN-2005-0988, and CAN-2005-1228
The vulnerabilities described in this article have been resolved, or do not affect any F5 products. There will be no further updates, unless new information is discovered...
CVE-2000-1221
The CVE describes a vulnerability in the line printer daemon (lpd) in the lpr package across multiple Linux operating systems. The root cause is an authentication check that compares the reverse-resolved hostname of the local machine to the hostname returned by gethostname; remote attackers can b...
DameWare Mini Remote Control Server <= 3.72 Buffer Overflow
Product: DameWare Mini Remote Control = 3.72.0.0 Vulnerability: Pre-Authentication Buffer Overflow Severity: High Risk Status: Vendor responded very quickly and has resolved the issue in 3.73 and later. The new version can be downloaded from http://www.dameware.com/downloads. Description: A buffe...
DoS in PureFTPd
PureFTPd all versions vulnerability. I. Entry. Vuln are all version deamons PureFTP. There is DoS bug. II. Vulnerability details. Vulnerability function is displayrate. There is simple overflow bug DoS: "in file src/ftpd.c" static void displayrateconst char word, offt size, const double started,...
SuSE Security Announcement: sysconfig (SuSE-SA:2002:016)
-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: sysconfig Announcement-ID: SuSE-SA:2002:016 Date: Wed May 8 12:00:00 MEST 2002 Affected products: 8.0 Vulnerability Type: remote command execution Severity 1-10: 4 SuSE default package: Yes. Other affected systems: No. Content...
