CentOS Update for evolution CESA-2009:0358 centos3 i386

Check for the Version of evolution OpenVAS Vulnerability Test CentOS Update for evolution CESA-2009:0358 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS Update for evolution CESA-2009:0358 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for evolution28-evolution-data-server CESA-2009:0354 centos4 i386

Check for the Version of evolution28-evolution-data-server OpenVAS Vulnerability Test CentOS Update for evolution28-evolution-data-server CESA-2009:0354 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Citrix Access Gateway Command Execution

The Citrix Access Gateway provides support for multiple authentication types. When utilizing the external legacy NTLM authentication module known as ntlmauthenticator the Access Gateway spawns the Samba 'samedit' command line utility to verify a user's identity and password. By embedding shell...

ZDI-11-082: Oracle Java Runtime NTLM Authentication Information Leakage Vulnerability

ZDI-11-082: Oracle Java Runtime NTLM Authentication Information Leakage Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-082 February 15, 2011 -- CVE ID: CVE-2010-4466 -- CVSS: 6.4, AV:N/AC:L/Au:N/C:P/I:P/A:N -- Affected Vendors: Oracle -- Affected Products: Oracle Java Runtime --...

Oracle Java Runtime NTLM Authentication Information Leakage Vulnerability

This vulnerability allows remote attackers to leak authentication details on vulnerable installations of the Oracle Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the handling of NTLM...

CVE-2010-4566

The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via...

Arachni v0.2.1 - penetration testers Framework - latest release

"Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications." This is the official change log: Major performance improvements Major system refactoring and code clean-up Major module API...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

Null pointer dereference

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

SuSE9 Security Update : Samba (YOU Patch Number 12644)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code. CVE-2010-3069 Additionally the update also contains fixes for the following non-security issues : - bnc567013 - Failed to join ADS Domain - bnc592198 - Samba 3.0 / 3.2...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0658-1)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code CVE-2010-3069. Additionally the update also contains fixes for the following non-security issues: bnc567013 - Failed to join ADS Domain bnc592198 - Samba 3.0 / 3.2...

MDVA-2010:172 : libneon0.27

This update fixes a reported buffer overflow found with ntlm authentication MDV 59779. Update: This advisory is obsoleted by http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:123 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...

Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2010:123)

This update fixes a reported buffer overflow found with ntlm authentication MDV 59779. This advisory obsoletes MDVA-2010:172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Security Advisory...

Mandriva Update for libneon0.27 MDVSA-2010:123 (libneon0.27)

Check for the Version of libneon0.27 OpenVAS Vulnerability Test Mandriva Update for libneon0.27 MDVSA-2010:123 libneon0.27 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for libneon0.27 MDVA-2010:172 (libneon0.27)

Check for the Version of libneon0.27 OpenVAS Vulnerability Test Mandriva Update for libneon0.27 MDVA-2010:172 libneon0.27 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RealNetworks Helix Server NTLM Authentication Heap Overflow (CVE-2010-1317)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. A heap-based buffer overflow vulnerability has been reported in RealNetworks Helix Server products. The flaw is due to an error when handling Base64-encoded NTLM Authentication data. A...

RealNetworks Helix Server buffer overflow

Buffer overflow during NTLM authentication...

CVE-2010-1317

Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data...