Ubuntu Update for nova USN-1326-1

Ubuntu Update for Linux kernel vulnerabilities USN-1326-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13261.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nova USN-1326-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2012-0030

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified projectid URI parameter...

CVE-2012-0030

CVE-2012-0030 affects Nova 2011.3 and Essex when using the OpenStack API, allowing remote authenticated users to bypass tenant access restrictions via a modified project_id in an OSAPI request. Root cause: insufficient validation of project_id in OSAPI calls. A fix is available in OpenStack Nova ...

CentOS Update for squirrelmail CESA-2009:0057 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for squirrelmail CESA-2009:0057 centos5 i386

Check for the Version of squirrelmail OpenVAS Vulnerability Test CentOS Update for squirrelmail CESA-2009:0057 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Microsoft Windows CSRSS LPC_PORT_CLOSED Information Disclosure (MS11-010; CVE-2011-0030)

The Client/Server Run-time Subsystem CSRSS is the user-mode portion of the Win32 subsystem. CSRSS is an essential subsystem that must be running at all times. CSRSS is responsible for console windows, and creating and/or deleting threads. An elevation of privilege vulnerability has been reported ...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2476687)

This host is missing a critical security update according to Microsoft Bulletin MS11-010. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-0030

CVE-2011-0030 describes a CSRSS Elevation of Privilege vulnerability in Windows XP SP2/SP3 and Windows Server 2003 SP2. The Client/Server Run-time Subsystem (CSRSS) does not properly terminate processes after a user logs out, allowing a local attacker to keep a crafted process running into the ne...

Microsoft Windows CSRSS (CVE-2011-0030) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to retain certain processes that may aid in attacks against subsequent users. Successfully exploiting this issue may aid in the complete compromise of affected computers...

MS11-010: Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2476687)

The remote host allows elevation of privileges in its Windows Client/Server run-time subsystem CSRSS because it may be possible to create a specially crafted application that continues to run after the attacker logs off. An attacker might exploit this to run arbitrary code in kernel mode. C Tenab...

Microsoft PowerPoint LinkedSlideAtom堆溢出漏洞（MS10-004）

BUGTRAQ ID: 38101 CVE ID: CVE-2010-0030 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件的方式中存在一个堆溢出漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 在解析两个相关的PowerPoint记录类型期间会出现这个漏洞。第一个记录类型LinkedSlideAtom用于指定不同幻灯片的协作信息，该记录中的一个字段用于指定文件中所出现的某些记录的数目。负责填充用于存储记录数组的代码在将元素储存到数组中时没有执行任何边界检查，这可能导致堆溢出。 Microsoft...

openSUSE Security Update : moodle (moodle-1933)

This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...

openSUSE Security Update : moodle (moodle-1933)

This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...

CVE-2010-0030

CVE-2010-0030 describes a remote code execution vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 caused by a heap-based buffer overflow in the LinkedSlideAtom handling. A crafted PowerPoint file could allow an attacker to take control of the affected system. The issue is part of...

Microsoft PowerPoint LinkedSlideAtom Heap Overflow (MS10-004; CVE-2010-0030)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a heap overflow in Microsoft PowerPoint LinkedSlideAtom when processing malicious PowerPoint...

MS10-004: Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (975416)

The remote Windows host is running a version of Microsoft PowerPoint that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted PowerPoint file, these issues could be leveraged to execute arbitrary code subject to the user's...

SquirrelMail软件包会话处理绕过认证漏洞

BUGTRAQ ID: 33354 CVECAN ID: CVE-2009-0030 SquirrelMail是一款PHP编写的WEBMAIL程序。 Red Hat为CVE-2008-3663所提供的修复导致SquirrelMail对所有的会话都设置了相同的SQMSESSID Cookie值，这允许通过认证的远程用户通过使用标准的webmail.php接口访问其他用户的文件夹列表和配置数据。 SquirrelMail 1.4.8 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2009:0057-01）以及相应补丁:...

openSUSE 10 Security Update : squirrelmail (squirrelmail-5978)

This update of squirrelmail corrects a problem introduced by a patch for CVE-2008-3663 that caused cookies to be static. CVE-2009-0030 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2009-0030

CVE-2009-0030 corresponds to a session cookie handling flaw in SquirrelMail 1.4.8 patched by Red Hat/Miracle Linux advisories. The root cause was an incorrect fix for CVE-2008-3663, causing the SQMSESSID cookie value to be identical across sessions. This enables remote authenticated users to acce...

RedHat Security Advisory RHSA-2009:0057

The remote host is missing updates announced in advisory RHSA-2009:0057. SquirrelMail is an easy-to-configure, standards-based, webmail package written in PHP. It includes built-in PHP support for the IMAP and SMTP protocols, and pure HTML 4.0 page-rendering with no JavaScript required for maximu...