http://www.badwarewatch.com Keeping you on top of Badware! Fri, 09 May 2008 18:51:41 +0000 http://wordpress.org/?v=2.6 en http://www.badwarewatch.com/cve-2008-2092-spa-2102-phone-adapter-11.php http://www.badwarewatch.com/cve-2008-2092-spa-2102-phone-adapter-11.php#comments Fri, 09 May 2008 18:51:41 +0000 admin http://www.badwarewatch.com/cve-2008-2092-spa-2102-phone-adapter-11.php Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet (”ping of death”). NOTE: the severity of this issue has been disputed since there are limited attack scenarios.

]]> http://www.badwarewatch.com/cve-2008-2092-spa-2102-phone-adapter-11.php/feed http://www.badwarewatch.com/cve-2008-2092-spa-2102-phone-adapter-10.php http://www.badwarewatch.com/cve-2008-2092-spa-2102-phone-adapter-10.php#comments Fri, 09 May 2008 18:51:25 +0000 admin http://www.badwarewatch.com/cve-2008-2092-spa-2102-phone-adapter-10.php Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet (”ping of death”). NOTE: the severity of this issue has been disputed since there are limited attack scenarios.

]]> http://www.badwarewatch.com/cve-2008-2092-spa-2102-phone-adapter-10.php/feed http://www.badwarewatch.com/cve-2008-2080-common-data-format-9.php http://www.badwarewatch.com/cve-2008-2080-common-data-format-9.php#comments Fri, 09 May 2008 18:50:22 +0000 admin http://www.badwarewatch.com/cve-2008-2080-common-data-format-9.php Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags.

]]> http://www.badwarewatch.com/cve-2008-2080-common-data-format-9.php/feed http://www.badwarewatch.com/cve-2008-2090-solaris.php http://www.badwarewatch.com/cve-2008-2090-solaris.php#comments Fri, 09 May 2008 18:50:20 +0000 admin http://www.badwarewatch.com/cve-2008-2090-solaris.php Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption and network traffic amplification) via a crafted SCTP packet.

]]> http://www.badwarewatch.com/cve-2008-2090-solaris.php/feed http://www.badwarewatch.com/cve-2008-2093-community_builder-com_comprofiler-5.php http://www.badwarewatch.com/cve-2008-2093-community_builder-com_comprofiler-5.php#comments Fri, 09 May 2008 18:50:20 +0000 admin http://www.badwarewatch.com/cve-2008-2093-community_builder-com_comprofiler-5.php SQL injection vulnerability in the Profiler (com_comprofiler) component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php.

]]> http://www.badwarewatch.com/cve-2008-2093-community_builder-com_comprofiler-5.php/feed http://www.badwarewatch.com/cve-2008-2093-community_builder-com_comprofiler-4.php http://www.badwarewatch.com/cve-2008-2093-community_builder-com_comprofiler-4.php#comments Fri, 09 May 2008 18:50:19 +0000 admin http://www.badwarewatch.com/cve-2008-2093-community_builder-com_comprofiler-4.php SQL injection vulnerability in the Profiler (com_comprofiler) component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php.

]]> http://www.badwarewatch.com/cve-2008-2093-community_builder-com_comprofiler-4.php/feed http://www.badwarewatch.com/cve-2008-2080-common-data-format-8.php http://www.badwarewatch.com/cve-2008-2080-common-data-format-8.php#comments Fri, 09 May 2008 18:50:16 +0000 admin http://www.badwarewatch.com/cve-2008-2080-common-data-format-8.php Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags.

]]> http://www.badwarewatch.com/cve-2008-2080-common-data-format-8.php/feed http://www.badwarewatch.com/cve-2008-2089-solaris-12.php http://www.badwarewatch.com/cve-2008-2089-solaris-12.php#comments Fri, 09 May 2008 18:50:14 +0000 admin http://www.badwarewatch.com/cve-2008-2089-solaris-12.php Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) via a crafted SCTP packet.

]]> http://www.badwarewatch.com/cve-2008-2089-solaris-12.php/feed http://www.badwarewatch.com/cve-2008-2080-common-data-format-7.php http://www.badwarewatch.com/cve-2008-2080-common-data-format-7.php#comments Fri, 09 May 2008 18:48:46 +0000 admin http://www.badwarewatch.com/cve-2008-2080-common-data-format-7.php Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags.

]]> http://www.badwarewatch.com/cve-2008-2080-common-data-format-7.php/feed http://www.badwarewatch.com/cve-2008-2080-common-data-format-6.php http://www.badwarewatch.com/cve-2008-2080-common-data-format-6.php#comments Fri, 09 May 2008 18:48:45 +0000 admin http://www.badwarewatch.com/cve-2008-2080-common-data-format-6.php Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags.

]]> http://www.badwarewatch.com/cve-2008-2080-common-data-format-6.php/feed