Lucene search
SuseSUSE-SA:2008:041HistoryAug 14, 2008 - 6:02 p.m.
remote code execution in openwsman
2008-08-1418:02:43
lists.opensuse.org
76
0.959 High
EPSS
Percentile
99.3%
The openwsman project provides an implementation of the Web Service Management specification. The SuSE Security-Team has found two critical issues in the code: - two remote buffer overflows while decoding the HTTP basic authentication header (CVE-2008-2234) - a possible SSL session replay attack affecting the client (depending on the configuration) (CVE-2008-2233) Both issues were fixed.
Solution
Please install the fixed package.
Related
openvas
openvas
SuSE Update for openwsman SUSE-SA:2008:041
2009-01-23 00:00:00
Gentoo Security Advisory GLSA 200806-04 (rdesktop)
2008-09-24 00:00:00
Ubuntu Update for rdesktop vulnerabilities USN-646-1
2009-03-23 00:00:00
nessus
nessus
openSUSE 10 Security Update : rdesktop (rdesktop-5271)
2008-08-15 00:00:00
GLSA-200806-04 : rdesktop: Multiple vulnerabilities
2008-06-16 00:00:00
osv
osv
rdesktop - several vulnerabilities
2008-05-11 00:00:00
pdns - DNS spoofing
2008-08-10 00:00:00
refpolicy - incompatible policy
2008-07-25 00:00:00
ubuntu
ubuntu
rdesktop vulnerabilities
2008-09-18 00:00:00
Bind vulnerability
2008-07-08 00:00:00
gentoo
gentoo
rdesktop: Multiple vulnerabilities
2008-06-14 00:00:00
MySQL: Privilege bypass
2008-09-04 00:00:00
securityvulns
securityvulns
rdesktop multiple security vulnerabilities
2008-05-08 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: rdesktop-1.6.0-1.fc8
2008-05-14 22:12:39
[SECURITY] Fedora 9 Update: rdesktop-1.6.0-1.fc9
2008-05-14 22:08:33
[SECURITY] Fedora 7 Update: rdesktop-1.6.0-1.fc7
2008-05-14 22:15:23
debian
debian
[SECURITY] [DSA 1573-1] New rdesktop packages fix several vulnerabilities
2008-05-12 08:54:07
[SECURITY] [DSA 1573-1] New php5 packages fix several vulnerabilities
2008-05-11 15:16:04
[SECURITY] [DSA 1627-1] New PowerDNS packages reduce DNS spoofing risk
2008-08-10 20:34:06
seebug
seebug
rdesktop多个缓冲区溢出漏洞
2008-05-10 00:00:00
Openwsman多个远程安全漏洞
2008-08-20 00:00:00
Gnome屏保程序本地信息泄露漏洞
2008-07-09 00:00:00
oraclelinux
oraclelinux
rdesktop security update
2008-07-24 00:00:00
rdesktop security and bug fix update
2008-08-01 00:00:00
vmware
vmware
redhat
redhat
(RHSA-2008:0575) Moderate: rdesktop security update
2008-07-24 00:00:00
(RHSA-2008:0510) Moderate: Red Hat Application Stack v1.3 security and enhancement update
2008-07-02 00:00:00
(RHSA-2008:0576) Moderate: rdesktop security update
2008-07-24 00:00:00
centos
centos
rdesktop security update
2008-07-24 19:41:48
rdesktop security update
2008-07-24 22:16:13
redhatcve
redhatcve
CVE-2008-3337
2019-10-04 20:21:18
cve
cve
ubuntucve
ubuntucve
prion
prion
Code injection
2008-08-08 19:41:00
Design/Logic Flaw
2007-12-17 18:46:00
Code injection
2008-08-18 17:41:00
debiancve
debiancve
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:28:42
Privilege Escalation
2020-04-10 00:22:36
freebsd
freebsd
mysql -- MyISAM table privileges security bypass vulnerability
2008-05-05 00:00:00
saint
saint
Openwsman HTTP Basic Authentication buffer overflow
2008-10-17 00:00:00
Openwsman HTTP Basic Authentication buffer overflow
2008-10-17 00:00:00
Openwsman HTTP Basic Authentication buffer overflow
2008-10-17 00:00:00
slackware
slackware
[slackware-security] rdesktop
2008-05-28 03:54:58
[slackware-security] ruby
2008-11-29 21:37:03
[slackware-security] dnsmasq
2008-07-24 00:02:47
packetstorm
packetstorm
rdesktop-underflow.txt
2008-05-09 00:00:00
rdesktoppdu-overflow.txt
2008-05-12 00:00:00
bailiwicked_domain.rb.txt
2008-07-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Openwsman HTTP Basic Authentication Buffer Overflow (CVE-2008-2234)
2010-06-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package ruby version 1.8.7-alt6
2008-08-12 00:00:00
Security fix for the ALT Linux 6 package bind version 9.3.5-alt2
2008-06-06 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-08:06.bind
2008-07-13 00:00:00