Lucene search
+L

602 matches found

OSV
OSV
added 2013/05/02 2:55 p.m.6 views

DEBIAN-CVE-2009-5029

Integer overflow in the tzfileread function in glibc before 2.15 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted timezone TZ file, as demonstrated using vsftpd...

6.8CVSS9.1AI score0.08073EPSS
SaveExploits2References1
attackerkb
attackerkb
added 2013/05/02 2:55 p.m.11 views

CVE-2009-5029

Integer overflow in the tzfileread function in glibc before 2.15 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted timezone TZ file, as demonstrated using vsftpd...

6.8CVSS6.1AI score0.08073EPSS
SaveExploits2References12
Prion
Prion
added 2013/05/02 2:55 p.m.29 views

Integer overflow

Integer overflow in the tzfileread function in glibc before 2.15 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted timezone TZ file, as demonstrated using vsftpd...

6.8CVSS7.6AI score0.08073EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2013/05/02 2:00 p.m.38 views

CVE-2009-5029

Integer overflow in the tzfileread function in glibc before 2.15 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted timezone TZ file, as demonstrated using vsftpd...

9.4AI score0.08073EPSS
SaveExploits2References5
Debian CVE
Debian CVE
added 2013/05/02 2:00 p.m.67 views

CVE-2009-5029

Integer overflow in the tzfileread function in glibc before 2.15 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted timezone TZ file, as demonstrated using vsftpd...

6.8CVSS9.6AI score0.08073EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2013/03/01 12:00 a.m.15 views

Scientific Linux Security Update : selinux-policy enhancement update on SL6.x i386/x86_64 (20130221)

This update adds the following enhancements : - With the Multi-Level Security MLS SELinux policy enabled, a user created with an SELinux MLS level could not login to the system through an |SSH| client. The SELinux policy rules have been updated to allow the user to log in to the system in the...

5.7AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2012/09/10 12:00 a.m.12 views

Slackware Advisory SSA:2012-041-05 vsftpd

The remote host is missing an update as announced via advisory SSA:2012-041-05. OpenVAS Vulnerability Test $Id: esoftslkssa201204105.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2012-041-05 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

0.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2012/09/10 12:00 a.m.18 views

Slackware: Security Advisory (SSA:2012-041-05)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:00 a.m.29 views

Scientific Linux Security Update : vsftpd on SL3.x i386/x86_64

The version of vsftpd as shipped in Scientific Linux 3 when used in combination with Pluggable Authentication Modules PAM had a memory leak on an invalid authentication attempt. Since vsftpd prior to version 2.0.5 allows any number of invalid attempts on the same connection this memory leak could...

7.1CVSS5.5AI score0.03717EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:00 a.m.42 views

Scientific Linux Security Update : vsftpd on SL4.x, SL5.x, SL6.x i386/x86_64

A flaw was discovered in the way vsftpd processed file name patterns. An FTP user could use this flaw to cause the vsftpd process to use an excessive amount of CPU time, when processing a request with a specially crafted file name pattern. CVE-2011-0762 The vsftpd daemon must be restarted for thi...

4CVSS6.2AI score0.73946EPSS
SaveExploits9References2
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:00 a.m.30 views

Scientific Linux Security Update : vsftpd on SL4.x i386/x86_64

The version of vsftpd as shipped in Red Hat Enterprise Linux 4 when used in combination with Pluggable Authentication Modules PAM had a memory leak on an invalid authentication attempt. Since vsftpd prior to version 2.0.5 allows any number of invalid attempts on the same connection this memory le...

7.1CVSS5.6AI score0.03717EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:00 a.m.24 views

Scientific Linux Security Update : vsftpd on SL5.x i386/x86_64

A memory leak was discovered in the vsftpd daemon. An attacker who is able to connect to an FTP service, either as an authenticated or anonymous user, could cause vsftpd to allocate all available memory if the 'denyfile' option was enabled in vsftpd.conf. CVE-2007-5962 As well, this updated packa...

7.1CVSS5.3AI score0.12061EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2012/07/30 12:00 a.m.36 views

CentOS Update for vsftpd CESA-2011:0337 centos5 x86_64

Check for the Version of vsftpd OpenVAS Vulnerability Test CentOS Update for vsftpd CESA-2011:0337 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4CVSS7.7AI score0.73946EPSS
SaveExploits9References2
OpenVAS
OpenVAS
added 2012/07/30 12:00 a.m.59 views

CentOS Update for vsftpd CESA-2011:0337 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4CVSS6.4AI score0.73946EPSS
SaveExploits9References2
NVD
NVD
added 2012/06/21 11:55 p.m.32 views

CVE-2012-2127

fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONENEWPID clone system calls, which allows remote attackers to cause a denial of service reference leak and memory consumption by making many connections to a daemon that uses PID namespac...

5CVSS6.3AI score0.04309EPSS
SaveExploits1References11
Cvelist
Cvelist
added 2012/06/21 11:00 p.m.45 views

CVE-2012-2127

fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONENEWPID clone system calls, which allows remote attackers to cause a denial of service reference leak and memory consumption by making many connections to a daemon that uses PID namespac...

6.1AI score0.04309EPSS
SaveExploits1References11
OSV
OSV
added 2012/06/21 12:00 a.m.10 views

UBUNTU-CVE-2012-2127

fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONENEWPID clone system calls, which allows remote attackers to cause a denial of service reference leak and memory consumption by making many connections to a daemon that uses PID namespac...

5CVSS5.9AI score0.04309EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2012/06/21 12:00 a.m.49 views

CVE-2012-2127

fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONENEWPID clone system calls, which allows remote attackers to cause a denial of service reference leak and memory consumption by making many connections to a daemon that uses PID namespac...

5CVSS6AI score0.04309EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2012/02/13 12:00 a.m.10 views

Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / current : vsftpd (SSA:2012-041-05)

New vsftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to work around a vulnerability in glibc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security...

5.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2012/02/12 12:00 a.m.37 views

Gentoo Security Advisory GLSA 201110-07 (vsftpd)

The remote host is missing updates announced in advisory GLSA 201110-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

4CVSS7.7AI score0.73946EPSS
SaveExploits9
Rows per page
Query Builder