RHEL 5 : libvirt (RHSA-2009:0382)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0382 advisory. - libvirt: missing checks for read-only connection CVE-2008-5086 - libvirt: libvirtproxy buffer overflow CVE-2009-0036 Note that Nessus has...

Scientific Linux Security Update : libvirt on SL5.x i386/x86_64

The libvirtd daemon was discovered to not properly check user connection permissions before performing certain privileged actions, such as requesting migration of an unprivileged guest domain to another system. A local user able to establish a read-only connection to libvirtd could use this flaw ...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2012-0036

CVE-2012-0036 affects curl/libcurl 7.2x prior to 7.24.0. The issue arises from not correctly handling special characters when extracting a URL pathname, enabling data-injection via crafted URLs and enabling CRLF injection in IMAP/POP3/SMTP paths. The CVSS metrics in the record show a Base score o...

CVE-2012-0036

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the 1 IMAP, 2 POP3, or 3 SMTP protocol...

Fedora Update for curl FEDORA-2012-0894

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for curl FEDORA-2012-0888

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : curl-7.21.3-13.fc15 (2012-0888)

reject URLs containing bad data CVE-2012-0036 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Debian Security Advisory DSA 2398-1 (curl)

The remote host is missing an update to curl announced via advisory DSA 2398-1. OpenVAS Vulnerability Test $Id: deb23981.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2398-1 curl Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

SuSE 10 Security Update : curl (ZYPP Patch Number 7937)

This update to curl fixes the following security issue : - Don't set SSLOPALL to avoid potential DTLS sniffing attacks. CVE-2012-0036 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

[SECURITY] [DSA 2398-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2398-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 30, 2012 http://www.debian.org/security/faq -...

Ubuntu 10.10 / 11.04 / 11.10 : curl vulnerability (USN-1346-1)

Dan Fandrich discovered that curl incorrectly handled URLs containing embedded or percent-encoded control characters. If a user or automated system were tricked into processing a specially crafted URL, arbitrary data could be injected. Note that Tenable Network Security has extracted the precedin...

CVE-2012-0036

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the 1 IMAP, 2 POP3, or 3 SMTP protocol...

Debian DSA-2338-1 : moodle - several vulnerabilities

Several cross-site scripting and information disclosure issues have been fixed in Moodle, a course management system for online learning : - MSA-11-0020 Continue links in error messages can lead offsite - MSA-11-0024 reCAPTCHA images were being authenticated from an older server - MSA-11-0025 Gro...

[SECURITY] [DSA 2338-1] moodle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2338-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 07, 2011 http://www.debian.org/security/faq -...

CVE-2011-0036

Microsoft Internet Explorer 6–8 contains a dangling pointer/memory corruption vulnerability in mshtml.dll triggered by certain object handling, allowing remote code execution. Connected advisories identify MS11-003 as the patch to mitigate this issue; exploitation details are discussed by VUPEN (...

Internet Explorer Insert Document Object Memory Corruption (MS11-003; CVE-2011-0036)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted when parsing specially crafted Web content. To trigger this issue, an attacker m...

Apple iOS < 3.1.3 Multiple Vulnerabilities

Binary data 5337.prm...

Apple Mac OS X CoreAudio MP4文件解析缓冲区溢出漏洞

BUGTRAQ ID: 37868 CVECAN ID: CVE-2010-0036 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X的CoreAudio驱动在解析mp4音频文件时存在缓冲区溢出，用户受骗打开恶意的mp4文件就可以导致拒绝服务或执行任意指令。 Apple Mac OS X 10.6.2 Apple Mac OS X 10.5.8 Apple MacOS X Server 10.6.2 Apple MacOS X Server 10.5.8 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...