9992 matches found
GLSA-200710-19 : The Sleuth Kit: Integer underflow
The remote host is affected by the vulnerability described in GLSA-200710-19 The Sleuth Kit: Integer underflow Jean-Sebastien Guay-Leroux reported an integer underflow in the fileprintf function of the 'file' utility which is bundled with The Sleuth Kit CVE-2007-1536, GLSA 200703-26. Note that...
The Sleuth Kit: Integer underflow
Background The Sleuth Kit is a collection of file system and media management forensic analysis tools. Description Jean-Sebastien Guay-Leroux reported an integer underflow in the fileprintf function of the "file" utility which is bundled with The Sleuth Kit CVE-2007-1536, GLSA 200703-26. Note tha...
openSUSE 10 Security Update : file (file-3033)
An integer underflow within the ELF header parsing has been fixed which could lead to arbitrary code execution. CVE-2007-1536 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
Preemptive Protection against EMC VMware Workstation DHCP Service Integer Underflow Vulnerability
An integer underflow vulnerability has been reported in the VMware DHCP service. VMware Workstation is a virtualization technology that allows running multiple instances of virtual computers simultaneously with the hosting operating system. The Dynamic Host Configuration Protocol DHCP provides...
CVE-2007-5135
Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...
CVE-2007-5135
Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...
Buffer overflow
Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...
CVE-2007-5135
The CVE-2007-5135 vulnerability is an off-by-one buffer overflow in OpenSSL SSL_get_shared_ciphers() affecting OpenSSL 0.9.7 up to 0.9.7l and 0.9.8 up to 0.9.8f. A crafted cipher-list could allow a remote attacker to trigger a one-byte underflow and potentially execute arbitrary code. Public advi...
CVE-2007-5135
Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...
CVE-2007-5135
Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...
CVE-2007-5135
Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...
CVE-2002-2227
CVE-2002-2227 affects ssldump up to version 0.9b2, where a buffer underflow in SSLv2 challenge handling allows a remote attacker to trigger memory corruption and cause a denial of service . Exploitation is remote and depends on sending a crafted SSLv2 challenge value. Impact is described as memor...
CVE-2002-2227
Buffer underflow in ssldump 0.9b2 and earlier allows remote attackers to cause a denial of service memory corruption via a crafted SSLv2 challenge value...
CVE-2007-0063
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528...
Integer overflow
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528...
cpuset information leak
Integer underflow in the cpusettasksread function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file...
Mandrake Linux Security Advisory : kernel (MDKSA-2007:171)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The Linux kernel did not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allowed local users to cause a denial of service process crash CVE-2006-5755. The...
Debian DSA-1363-1 : linux-2.6 - several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2172 Thomas Graf reported a typo in the IPv4...
CVE-2007-4643
Integer underflow in Doomsday aka deng 1.9.0-beta5.1 and earlier allows remote attackers to cause a denial of service daemon crash via a PKTCHAT packet with a data length less than 3, which triggers an erroneous malloc, possibly related to the SvHandlePacket function in svmain.c...