6765 matches found
RealServer Malformed viewsource Directory Request DoS
The version of RealServer running on the remote host has a denial of service vulnerability. It was possible to crash the remote host by sending a malformed HTTP request for a page in the viewsource directory. %NASLMINLEVEL 70300 This script was written by John Lampe [email protected] See the...
ITHouse Mail Server v1.04 To: Field Handling Overflow
The remote SMTP server is ITHouse Mail Server. Versions 1.04 or earlier of this server are vulnerable to a buffer overrun which happens during the delivery routine of the mails if an attacker has sent a message with a too long 'To:' field. An attacker may use this flaw to execute arbitrary code o...
[SECURITY] New version of splitvt released
Package: splitvt Vulnerability: local root exploit Debian-specific: no The version of splitvt distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions, is vulnerable to a local buffer overflow. This could be exploited to give a shell runni...
Security Advisory 2000-006
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-006 ================================= Topic: /etc/ftpchroot parsing broken in NetBSD-1.4.2 Version: NetBSD 1.4.2 only Severity: medium to high if using /etc/ftpchroot, none if not. Abstract ======== A fix which attempted to make...
lynx.2.8.2.extern.txt
-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: lynx-2.8.2 and older Date: Thu Sep 16 21:29:15 CEST 1999 Affected: all Linux distributions using lynx-2.8.2 and older A security hole was discovered in the package mentioned above. Please update as soon as possible or disable...
Real Video Server Telnet Malformed Data Remote DoS
It was possible to crash the remote Progressive Networks Real Video Server by sending it specially crafted data. An attacker may use this flaw to prevent you from sharing sound and video. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10183; scriptversion "1.26";...
PT-1999-1794 · Ncftp · Ncftpd
Name of the Vulnerable Software and Affected Versions: NcFTPd versions prior to 2.4.1 Description: The issue is caused by an off-by-one error in the NcFTPd FTP server, allowing a remote attacker to cause a denial of service crash via a long PORT command. Recommendations: For versions prior to...
PT-1999-1084 · Openssh · Ssh
Name of the Vulnerable Software and Affected Versions: SSH versions 1.2.27 and 2.0.11 Description: The issue allows users with expired accounts to login in certain instances of SSH on Linux systems. Recommendations: For SSH version 1.2.27, update to a version that addresses the issue of allowing...
PT-1998-1035 · Cisco · Cisco Ios
Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 9.x through 11.x Description: The issue allows attackers to crash a Cisco IOS router or device if they can access an interactive prompt, such as a login. Recommendations: For versions 9.x through 11.x, update to a version...
FreeBSD-SA-96:09.vfsload
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:09 Security Advisory Revised: Wed May 22 00:20:09 PDT 1996 FreeBSD, Inc. Topic: unauthorized access via mountunion / mountmsdos vfsload Category: core Module: libc...
FreeBSD-SA-96:02.apache
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:02 Security Advisory FreeBSD, Inc. Topic: apache httpd meta-character escaping Category: port Module: apache Announced: 1996-04-22 Affects: FreeBSD 2.0.5 and 2.1.0...
DUO-PSA-2016-001: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2016-001 Original Publication Date: 2016-05-11 Revision Date: 2016-05-23 Status: Confirmed, Fixed Document Revision: 3 Overview Duo Security has identified multiple issues in the Duo Authentication Proxy which, under certain configurations, could...
ROS-2-2254
2.2254 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...
DUO-PSA-2017-002: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2017-002 Publication Date: 2017-05-31 Revision Date: 2017-05-31 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Security has identified an issue in duounix, which, under certain uncommon configurations, could enable attackers to bypass...
DUO-PSA-2016-002: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2016-002 Publication Date: 2016-12-14 Revision Date: 2016-12-21 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in the Duo Authentication Proxy which, under certain uncommon configurations, could enable...
DUO-PSA-2015-002: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2015-002 Original Publication Date: 2015-04-06 Revision Date: 2015-04-13 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in recent versions of Duo Mobile for iOS that could allow attackers to perform a...
DUO-PSA-2019-001: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2019-001 Publication Date: 2019-04-16 Revision Date: 2019-04-16 Status: Confirmed, Fixed Document Revision: 1 Overview A Duo customer has identified an issue where Duo Authentication for Windows Logon could incorrectly enforce "failmode" followin...
DUO-PSA-2017-002: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2017-002 Publication Date: 2017-05-31 Revision Date: 2017-05-31 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Security has identified an issue in duounix, which, under certain uncommon configurations, could enable attackers to bypass...
KLA10863 Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration
Multiple serious vulnerabilities have been found in Zimbra Collaboration. Malicious users can exploit these vulnerabilities to inject arbitrary code. Technical details To exploit this vulnerabilities remote attackers to inject arbitrary web script or HTML via unspecified vectors. Original...
