gss 4480 global site selector vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

dnsserver in Cisco Application Control Engine Global Site Selector (GSS) prior to 3.0(1) allows remote malicious users to cause a denial of service (daemon crash) via a series of crafted DNS requests, aka Bug ID CSCsj70093.

Cisco Gss 4480 Global Site Selector Cisco Gss 4490 Global Site Selector Cisco Gss 4491 Global Site Selector Cisco Gss 4492r Global Site Selector

5

CVSSv2

webadmin.exe in Novell Nsure Audit 1.0.1 allows remote malicious users to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability.

Novell Nsure Audit 1.0.1

5

CVSSv2

Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote malicious users to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.

Openssl Openssl 0.9.6 Openssl Openssl 0.9.7

1 EDB exploit

5

CVSSv2

OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote malicious users to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used...

Openssl Openssl 0.9.6 Openssl Openssl 0.9.7

10

CVSSv2

Double free vulnerability in OpenSSL 0.9.7 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.

Openssl Openssl 0.9.6 Openssl Openssl 0.9.7

7.5

CVSSv2

"Memory bugs" in OpenSSH 3.7.1 and previous versions, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.

Openbsd Openssh

10

CVSSv2

A "buffer management error" in buffer_append_space of buffer.c for OpenSSH prior to 3.7 may allow remote malicious users to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.

Openbsd Openssh

7.5

CVSSv2

Multiple "buffer management errors" in OpenSSH prior to 3.7.1 may allow malicious users to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerabi...

Openbsd Openssh

5

CVSSv2

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshak...

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook