3389 matches found
CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
Cisco Security Agent远程端口扫描拒绝服务漏洞
Cisco Security Agent CSA可以为服务器和桌面计算系统提供威胁防护。 CSA在处理端口扫描等特殊情况时存在漏洞，远程攻击者可能利用此漏洞导致服务响应能力下降。 如果以特定的选项对CSA for Linux运行端口扫描的话，就可能消耗过多的系统资源，导致拒绝服务。 Cisco CSA 5.0 for Linux Hotfix 5.0.0.1 Cisco CSA 4.5 for Linux Hotfix 4.5.1.6 Cisco CUCM = 5.04 Cisco CUPS = 1.02 临时解决方法：...
CVE-2006-5449
procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule...
CVE-2006-5449
procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule...
CVE-2006-5449
procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule...
CVE-2006-4981
Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that 1 permits all non-Windows devices or 2 whitelists certain sets of Organizationally Unique Identifiers OUIs...
SolidState 0.4 - Multiple Remote File Inclusions
SolidState 0.4 - Multiple Remote File Inclusions ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:...
flex fast lexical analyzer generator buffer overflow
Buffer overflow on REJECT rule parsing...
Evolution Emailer DoS
About 7 weeks ago an automated mailing list spewed a large but valid email containing a lot of URLS and other formatting. When this email is fed into evolution the behaviour it causes leads evolution to expand dramatically in size and eat vast amounts of CPU time. If you've got a lot of patience...
Detect talkd server port and protocol version
The remote host is running a 'talkd' daemon. talkd is the server that notifies a user that someone else wants to initiate a conversation with him. OpenVAS Vulnerability Test $Id: ntalkdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Detect talkd server port and protocol version Authors...
Apache mod_access rule bypass
The target is running an Apache web server that may not properly handle access controls. In effect, on big-endian 64-bit platforms, Apache fails to match allow or deny rules containing an IP address but not a netmask. OpenVAS has determined the vulnerability exists only by looking at the Server...
Apache UserDir Sensitive Information Disclosure
An information leak occurs on Apache based web servers whenever the UserDir module is enabled. The vulnerability allows an external attacker to enumerate existing accounts by requesting access to their home directory and monitoring the response. OpenVAS Vulnerability Test $Id: apacheusername.nasl...
Apache HTTP Server 'mod_access' Rule Bypass Vulnerability
The target is running an Apache web server that may not properly handle access controls. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...
CVE-2005-3121
A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations...
CVE-2005-3121
A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations...
CVE-2005-2889
Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intended restrictions...
CVE-2005-2889
Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intended restrictions...
CVE-2005-2889
CVE-2005-2889 concerns Check Point NGX R60 where the CIFS service group implementation may mishandle traffic not designated as CIFS. The CERT/Check Point entry notes that the CIFS service group could allow unintended traffic to pass or cause legitimate traffic to be dropped, depending on rule con...
Rule bypassing in CheckPoint NGX R60
Hi folks, as playing a little bit with CheckPoint NGX new release R60, I noticed a serious problem with the predefined service group "CIFS". This group includes the services called "microsoft-ds" TCP Port 445 and the predefined service group "NBT", which includes some old smb-stuff. If I use this...