232 matches found
Ubuntu: Security Advisory (USN-2211-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2015:0674-1 Security update for xorg-x11-libs
xorg-x11-libs was patched to fix the following security issues: Integer overflow of allocations in font metadata file parsing. CVE-2014-0209 libxfont not validating length fields when parsing xfs protocol replies. CVE-2014-0210 Integer overflows causing miscalculating memory needs for xfs replies...
CVE-2014-0209
CVE-2014-0209 (libXfont) affects X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901, with multiple integer overflows in FontFileAddEntry and lexAlias that may allow local privilege escalation by adding a large fonts.dir or fonts.alias file to the font path, triggering a heap-based buffer ov...
[USN-2211-1] libXfont vulnerabilities
========================================================================== Ubuntu Security Notice USN-2211-1 May 14, 2014 libxfont vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[oss-security] Fwd: [ANNOUNCE] X.Org Security Advisory: Multiple issues in libXfont
ANNOUNCE XOrg Security Advisory: Multiple issues in libXfont.eml Тема: ANNOUNCE X.Org Security Advisory: Multiple issues in libXfont От: Alan Coopersmith [email protected] Дата: 13.05.2014 19:08 Кому: [email protected] Копия: [email protected], [email protected] X.Org Securi...
Ubuntu 14.04 LTS : libXfont vulnerabilities (USN-2211-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2211-1 advisory. Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to...
USN-2211-1: libXfont vulnerabilities
Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges. CVE-2014-0209 Ilja van Sprundel discovered that libXfont incorrectly handled...
Debian DSA-2927-1 : libxfont - security update
Ilja van Sprundel of IOActive discovered several security issues in the X.Org libXfont library, which may allow a local, authenticated user to attempt to raise privileges; or a remote attacker who can control the font server to attempt to execute code with the privileges of the X server. -...
[SECURITY] [DSA 2927-1] libxfont security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2927-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 13, 2014 http://www.debian.org/security/faq -...
CVE-2014-0209
Multiple integer overflows in the 1 FontFileAddEntry and 2 lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffe...
DSA-2927-1 libxfont - security update
Bulletin has no description...
Debian: Security Advisory (DSA-2927-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 2611-1] movabletype-opensource security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2611-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 22, 2013 http://www.debian.org/security/faq -...
RHEL 5 : flash-plugin (RHSA-2010:0623)
The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0623 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...
RHEL 3 / 4 : flash-plugin (RHSA-2010:0624)
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...
CVE-2013-0209
lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injecti...
CVE-2012-6315
CVE-2012-6315 is a reservation duplicate of CVE-2013-0209. The connected records show that Movable Type 4.2x–4.38 exposed an authentication gap in mt-upgrade.cgi’s database-migration functions, enabling an attacker to perform eval and SQL injections and potentially execute arbitrary Perl code rem...
CVE-2013-0209
creationtimestamp| type| source ---|---|--- 2013-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24321 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/movabletypeupgradeexec.rb 2025-02-06 03:13:41+00:00|...
Movable Type 4.2x/4.3x - Web Upgrade Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit4 'Movable Type 4.2x, 4.3x Web Upgrade...
