231 matches found
Horde 3.3.12 Backdoor Arbitrary PHP Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Horde 3.3.12...
CVE-2012-0209
creationtimestamp| type| source ---|---|--- 2012-02-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18492 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/hordehrefbackdoor.rb 2025-02-06 03:13:40+00:00| seen|...
Horde 3.3.12 open_calendar.js Backdoor
A backdoored Horde release was detected on the remote host. The Horde FTP server was compromised, and backdoor code was added to allow arbitrary PHP execution. The backdoor reportedly was present in versions of Horde 3.3.12 downloaded between November 15, 2011 and February 7, 2012. A remote,...
Horde 3.3.12 Backdoor Arbitrary PHP Code Execution
This module exploits an arbitrary PHP code execution vulnerability introduced as a backdoor into Horde 3.3.12 and Horde Groupware 1.2.10. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Horde...
Horde Groupware Source Packages Backdoor Vulnerability
Horde Groupware is prone to a backdoor vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful attacks will compromise the affected application. Horde Groupware versions 1.2.10 between November 2, 2011, and February 7, 2012, are...
Mac OS X v10.6.8 Multiple Vulnerabilities (2011-004)
This host is missing an important security update according to Mac OS X 10.5.8 Update/Mac OS X Security Update 2011-004. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-004.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.8 Multiple Vulnerabilities 2011-004 Authors: Antu Sanadi Copyright:...
QuickTime < 7.7 Multiple Vulnerabilities
Binary data 801184.prm...
ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability
ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-229 June 29, 2011 -- CVE ID: CVE-2011-0209 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktime --...
ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability
ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-229 June 29, 2011 -- CVE ID: CVE-2011-0209 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktime --...
CVE-2011-0209
CVE-2011-0209 : An integer overflow in QuickTime’s handling of RIFF WAV files on Mac OS X before 10.6.8 can be exploited remotely to achieve arbitrary code execution or cause a denial of service (application crash) via a crafted WAV file. The issue is documented in the Apple advisory and is addre...
Gentoo Security Advisory GLSA 201101-09 (adobe-flash)
The remote host is missing updates announced in advisory GLSA 201101-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7132)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240 / CVE-2010-2862. This has been fixed. This update also incorporates the Adobe Flash Player update APSB10-16 for the bundled flash player parts. CVE-2010-0209 / CVE-2010-2188 / CVE-2010-2213 /...
SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3004 / 3005)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240 / CVE-2010-2862. This has been fixed. This update also incorporates the Adobe Flash Player update APSB10-16 for the bundled flash player parts. CVE-2010-0209 / CVE-2010-2188 / CVE-2010-2213 /...
SuSE 11 / 11.1 Security Update : Acrobat Reader (SAT Patch Numbers 3008 / 3009)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240 / CVE-2010-2862. This has been fixed. This update also incorporates the Adobe Flash Player update APSB10-16 for the bundled flash player parts. CVE-2010-0209 / CVE-2010-2188 / CVE-2010-2213 /...
SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 2900 / 2901)
Flash Player was updated to version 10.1.82.76 fixing several critical security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...
[security bulletin] HPSBMA02592 SSRT100300 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows Running Adobe Flash, Remote Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized Modification
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02549485 Version: 1 HPSBMA02592 SSRT100300 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows Running Adobe Flash, Remote Execution of Arbitrary Code, Denial of Service DoS,...
RHEL 5 : acroread (RHSA-2010:0636)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0636 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes a vulnerability in Adobe Reader. Th...
FreeBSD Ports: linux-flashplugin
The remote host is missing an update to the system as announced in the referenced advisory. VID e19e74a4-a712-11df-b234-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID e19e74a4-a712-11df-b234-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Adobe Acrobat < 9.3.4 / 8.2.4 Multiple Vulnerabilities (APSB10-17)
The version of Adobe Acrobat installed on the remote host is earlier than 9.3.4 / 8.2.4. Such versions are reportedly affected by multiple vulnerabilities : - Multiple vulnerabilities in the bundled Flash Player as noted in APSB10-16. CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,...
Adobe Flash Player/Air Multiple Vulnerabilities - August10 (Windows)
This host is installed with Adobe Flash Player/Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeprdtsmultdosvulnaug10win.nasl 6475 2017-06-29 06:35:11Z cfischer $ Adobe Flash Player/Air Multiple Vulnerabilities - August10 Windows Authors: Sooraj KS Copyright:...