74 matches found
Mandrake Security Advisory MDVSA-2009:234 (silc-toolkit)
The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:234. OpenVAS Vulnerability Test $Id: mdksa2009234.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:234 silc-toolkit Authors: Thomas Reinke Copyright: Copyright c 20...
Mandrake Security Advisory MDVSA-2009:235 (silc-toolkit)
The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:235. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:234 (silc-toolkit)
The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:234. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:235 (silc-toolkit)
The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:235. OpenVAS Vulnerability Test $Id: mdksa2009235.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:235 silc-toolkit Authors: Thomas Reinke Copyright: Copyright c 20...
Mandrake Security Advisory MDVSA-2009:234-1 (silc-toolkit)
The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:234-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
[Backports-security-announce] Security update for silc-client/silc-toolkit
Jérémy Bobbio uploaded new packages for silc-client/silc-toolkit which fixed the following security problems: DSA 1879-1 Several vulnerabilities have been discovered in the software suite for the SILC protocol, a network protocol designed to provide end-to-end security for conferencing services...
openSUSE Security Update : silc-toolkit (silc-toolkit-1280)
This update of slic-toolkit fixes stack-based overflow while encoding a ASN.1 OID CVE-2008-7159 and several format string bugs CVE-2009-3051, CVE-2008-7160. The probability to exploit this issues to execute arbitrary code is high. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...
openSUSE Security Update : silc-toolkit (silc-toolkit-1280)
This update of slic-toolkit fixes stack-based overflow while encoding a ASN.1 OID CVE-2008-7159 and several format string bugs CVE-2009-3051, CVE-2008-7160. The probability to exploit this issues to execute arbitrary code is high. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...
Mandriva Linux Security Advisory : silc-toolkit (MDVSA-2009:234-2)
Multiple vulnerabilities was discovered and corrected in silc-toolkit : Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format...
FreeBSD Ports: silc-toolkit
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: silc-toolkit
The remote host is missing an update to the system as announced in the referenced advisory. VID 24aa9970-9ccd-11de-af10-000c29a67389 OpenVAS Vulnerability Test $ Description: Auto generated from VID 24aa9970-9ccd-11de-af10-000c29a67389 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2008-7160
The silchttpserverparse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing SILC Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header,...
CVE-2009-3163
Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to 1...
Format string
Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to 1...
CVE-2009-3163
Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to 1...
CVE-2008-7159
The silcasn1encoder function in lib/silcasn1/silcasn1encode.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string...
Format string
The silcasn1encoder function in lib/silcasn1/silcasn1encode.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string...
CVE-2008-7159
The silcasn1encoder function in lib/silcasn1/silcasn1encode.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string...
CVE-2008-7160
The silchttpserverparse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing SILC Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header,...
CVE-2008-7159
CVE-2008-7159 affects SILC Toolkit (and SILC Client) prior to versions 1.1.8/1.1.8+. The root cause is an incorrect format string in the ASN.1 OID encoder, allowing a remote attacker to overflow a stack location on 64-bit systems and potentially execute arbitrary code. Affected components: silcas...