4384 matches found
CVE-2006-0049: Undefined Security Weakness
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different...
GnuPG does not detect injection of unsigned data
GnuPG does not detect injection of unsigned data ================================================ released 2006-03-09, CVE-2006-0049 Summary ======= In the aftermath of the false positive signature verfication bug announced 2006-02-15 more thorough testing of the fix has been done and another...
GnuPG unsigned data injection
While decoding non-detached with signature within text messages unsigned data behind signature is invalidely decoded as a part of the messages...
GnuPG does not detect injection of unsigned data
Werner Koch reports: In the aftermath of the false positive signature verfication bug announced 2006-02-15 more thorough testing of the fix has been done and another vulnerability has been detected. This new problem affects the use of gpg for verification of signatures which are not detached...
security flaw
The procfs code procmisc.c in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value...
CVE-2005-4605: Undefined Security Weakness
The procfs code procmisc.c in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value...
ASP.NET __VIEWSTATE function replay attack
Data is stored signed on client side, but host name and timestamp are not part of signed data...
up-imapproxy multiple bugs
Signed/unsigned conversion and memory management bugs...
TeamFactor integer overflow
Integer overflow on signed/unsigned conversion...
[Full-Disclosure] Cross Site Java applets
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cross-Site Java breaks Sandbox Isolation for Unsigned Applets ============================================================= Product : Java Plugin Version : 1.4.201 OS : Win32 should apply for other OSs too URL : http://java.sun.com Found by : Marc...
Sun Java Plugin 1.4.2 _01 - Cross-Site Applet Sandbox Security Model Violation
Sun Java Plugin 1.4.2 01 - Cross-Site Applet Sandbox Security Model Violation source: https://www.securityfocus.com/bid/8857/info A vulnerability has been reported in Java implementations that may potentially allow Java applets from two different domains to violate the sandbox security model and...
Buffer overflows on address parsing in sendmail
Buffer overflows because on signed/unsigned type conversion...
CVE-2003-0546: Undefined Security Weakness
up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised...
Linux kernel signed/unsigned conversion bug
Signed/unsigned conversion bug during processing of NFSv3 XDR data leads to buffer overflow...
Remote Linux Kernel < 2.4.21 DoS in XDR routine.
Hello all, I have discovered a signed/unsigned issue in a routine responsible for demarshalling XDR data for NFSv3 procedure calls. As far as I can tell, this bug has existed since NFSv3 support was integrated. It has been silently fixed in 2.4.21. The bug is in the decodefh routine of...
Privilege escalation applet, Java Media Framework
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Bugtraqqers, this is the proof-of-concept code for the vulnerability described in http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert2F54760 The code shows that there is more in this vulnerability than crash the vm, it allows to read and write...
PT-2002-2428 · Cisco · Cisco Ios +2
Name of the Vulnerable Software and Affected Versions: Cisco IOS software versions 11.3 through 12.2 Description: The issue allows remote attackers to modify Data Over Cable Service Interface Specification DOCSIS settings via a DOCSIS file without a Message Integrity Check MIC signature, which is...
Signed/unsigned conversion bug in wwwoffled
Content-Length integer type bug...
RUS-CERT Advisory 2002-08:01: Incorrect integer overflow detection in C code
Incorrect integer overflow detection in C code A widely used method of detecting integer overflows results in undefined behavior according to the C standard. Who Should Read This Document This advisory deals with with details of the C programming language. It is targeted at C programmers. Systems...