150 matches found
Fedora Core 8 FEDORA-2009-0154 (xterm)
The remote host is missing an update to xterm announced via advisory FEDORA-2009-0154. OpenVAS Vulnerability Test $Id: fcore20090154.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0154 xterm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Crlf injection
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...
Gentoo Security Advisory GLSA 200601-01 (pinentry)
The remote host is missing updates announced in advisory GLSA 200601-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200804-21 (netscape-flash)
The remote host is missing updates announced in advisory GLSA 200804-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: linux-flashplugin
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: linux-flashplugin
The remote host is missing an update to the system as announced in the referenced advisory. VID 04c6187d-2d8f-11dd-98c9-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0071
creationtimestamp| type| source ---|---|--- 2008-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5918...
Mac OS X Multiple Vulnerabilities (Security Update 2008-003)
The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-003 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...
Mac OS X 10.5.x < 10.5.3 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.3. Mac OS X 10.5.3 contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid32477;...
SuSE 10 Security Update : flash-player (ZYPP Patch Number 5159)
This flash player update to version 9.0.124.0 fixes several security problems. In the worst case an attacker could potentially have flash-player execute arbitrary code via specially crafted files. CVE-2007-5275 / CVE-2007-6243 / CVE-2007-6637 / CVE-2007-6019 / CVE-2007-0071 / CVE-2008-1655 /...
Immunity Canvas: FLASH_DUKE
Name| flashduke ---|--- CVE| CVE-2007-0071 Exploit Pack| CANVAS Description| Adobe Flash Player DefineSceneAndFrameLabelData Tag Overflow Notes| CVE Name: CVE-2007-0071 VENDOR: Adobe VersionsAffected: Adobe Flash Player 9.0.115.0 and below Repeatability: References:...
Debian Security Advisory DSA 656-1 (vdr)
The remote host is missing an update to vdr announced via advisory DSA 656-1. OpenVAS Vulnerability Test $Id: deb6561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 656-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Microsoft IIS HTR Request Buffer Overflow (CVE-2002-0071)
...
CVE-2006-0071
Pinentry on Gentoo is affected by CVE-2006-0071: the pinentry ebuild before 0.7.2-r2 sets the sgid bit on pinentry binaries, allowing local users to read or overwrite files with gid 0. Affected packages include pinentry, pinentry-curses, pinentry-gtk, and pinentry-gtk. Remediation: upgrade to pin...
Microsoft IIS IDA/IDQ Path Disclosure Vulnerability (MS00-006) - Active Check
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. SPDX-FileCopyrightText: 2000 Filipe Custodio Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
CVE-2005-0071
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files...
CVE-2005-0071
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files...
CVE-2005-0071
Vulnerability CVE-2005-0071 affects VDR prior to 1.2.6, where file creation is insecure, enabling a local attacker to overwrite arbitrary files. The issue is documented across multiple feeds (NVD, OSV, Debian GLSA, Gentoo GLSA) with exploitation potential at local level and remediation via upgrad...
Debian DSA-656-1 : vdr - insecure file access
Javier Fernandez-Sanguino Pena from the Debian Security Audit Team has discovered that the vdr daemon which is used for video disk recorders for DVB cards can overwrite arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
CVE-2003-0071
CVE-2003-0071 affects the xterm terminal emulator in XFree86 up to version 4.2.99.4 and earlier, where the DEC UDK processing feature can be abused by a crafted escape sequence to drive the terminal into a tight loop, producing a denial of service. The MiracleLinux note links this issue to relate...