MS09-061: Vulnerabilities in the Microsoft .NET Framework 2.0 SP1 Common Language Runtime Could Allow Remote Code Execution (974378)

Binary data 5222.prm...

MS09-061: Vulnerabilities in the Microsoft .NET Framework 3.5.1 Common Language Runtime Could Allow Remote Code Execution (974378)

Binary data 5224.prm...

MS09-061: Vulnerabilities in the Microsoft .NET Framework 2.0 SP2 Common Language Runtime Could Allow Remote Code Execution (974378)

Binary data 5223.prm...

Microsoft .NET Common Language Runtime Code Execution Vulnerability (974378)

This host is missing a critical security update according to Microsoft Bulletin MS09-061. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Immunity Canvas: MS09_061_CAS

Name| ms09061cas ---|--- CVE| CVE-2009-0091 Exploit Pack| CANVAS Description| MS09-061 Microsoft .NET CAS Type Verification Vulnerability Notes| URL: http://www.microsoft.com/technet/security/Bulletin/MS09-061.mspx CVE Name: CVE-2009-0091 VENDOR: Microsoft CVE Url:...

CVE-2009-0091

CVE-2009-0091 is a Microsoft .NET Framework Type Verification Vulnerability. The issue involves .NET Framework 2.0, 2.0 SP1, and 3.5 where a type-equality check in verifiable code could be bypassed, allowing remote code execution via crafted XBAP, ASP.NET, or .NET Framework applications. Public d...

Microsoft .NET Framework类型校验远程代码执行漏洞(MS09-059)

Bugraq ID: 36617 CVE ID：CVE-2009-0091 Microsoft .NET Framework是一个流行的软件开发工具包。 Microsoft .NET Framework存在一个远程代码执行漏洞，允许恶意Microsoft .NET应用程序绕过类型等式检查，恶意Microsoft .NET应用程序通过指派某个对象类型为其他类型，导致任意未管理代码执行。 目前没有详细漏洞细节提供。 Microsoft .NET Framework 1.x Microsoft .NET Framework 2.x Microsoft .NET Framework 3.x...

MS09-061: Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)

The remote Windows host is running a version of the Microsoft .NET Framework that is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Microsoft .NET Framework that could allow a malicious Microsoft .NET application to obtain a managed pointer to stack...

CVE-2008-0091

CVE-2008-0091 concerns a directory traversal in download2.php of AGENCY4NET WEBFTP 1 . The flaw allows remote attackers to read and delete arbitrary files by supplying a ".." in the file parameter. According to NVD, the vulnerability has a CVSS v2 base score of 6.4 (MEDIUM) with network access, l...

CVE-2007-0091

CVE-2007-0091 affects newsCMSlite and is caused by insufficient access control that allows remote attackers to download the web root database (newsCMS.mdb), exposing passwords. The connected records confirm this vulnerability type and impact but do not provide affected versions, vendor patches, o...

CVE-2006-0091

CVE-2006-0091 affects Open-Xchange Webmail prior to/including 0.8.1-6 with Inline HTML enabled. The vulnerability is a Cross-Site Scripting (XSS) flaw that lets an attacker inject arbitrary web script or HTML via e-mail attachments, which are rendered inline by the webmail interface. The referenc...

CVE-2005-0091

Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls...

CVE-2005-0091

CVE-2005-0091 is described across connected records as a vulnerability in the Red Hat Enterprise Linux 4 kernel with the hugemem patch. The issue allows a local attacker to read and write arbitrary kernel memory and gain privileges via certain syscalls on systems using the hugemem configuration (...

CVE-2004-0091

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the regsite or possibly regsite parameter. NOTE: the vendor has disputed this issue, saying...

CVE-2004-0091

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the regsite or possibly regsite parameter. NOTE: the vendor has disputed this issue, saying...

CVE-2004-0091

CVE-2004-0091 is an XSS issue in vBulletin’s register.php (unknown versions) exploitable via the reg_site parameter. The vendor disputes the existence of reg_site/reg_site variable in vBulletin 2/3 sources; no concrete exploitation or fix/version details are provided in the connected documents. R...

CVE-2003-0091

Stack-based buffer overflow in the bsdqueue function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege...

CVE-2003-0091

CVE-2003-0091 corresponds to a stack-based buffer overflow in the lpq program on Sun Solaris 2.6/2.6_x86/7, in the bsd_queue() function, allowing local users to gain root privileges. Solaris 8/9 mitigates this via strlcat. Exploitation details are not provided in the documents; NSFOCUS reports th...

CVE-2002-0091

CVE-2002-0091 affects CIDER SHADOW 1.5 and 1.6. The vulnerability consists of CGI scripts that allow remote execution of arbitrary commands through certain form fields due to insufficient input verification. Impact is remote code execution with the privileges of the web server process; exploitati...

CVE-2001-0091

The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the "Scriptlet Rendering" vulnerability...