155 matches found
CVE-2014-0229
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1 (and Cloudera CDH 5.0.x before 5.0.2) fail to check authorization for HDFS admin commands refreshNamenodes, deleteBlockPool, and shutdownDatanode. This allows remote authenticated users to cause DataNodes to shut down or perform unnecessary...
CVE-2014-0229
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the 1 refreshNamenodes, 2 deleteBlockPool, and 3 shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause a denial of service DataNode...
CVE-2016-0229
The CVE-2016-0229 entry affects IBM Marketing Platform 8.6.x and 9.x up to version 9.1.2.2, which are vulnerable to Cross-site Scripting (XSS) via a crafted URL. The root cause is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML. Exploitation is described as remote,...
INFOMARK IMW-C920W miniupnpd 1.0 - Denial of Service Vulnerability
MiniUPNPd version 1.0 remote denial of service exploit. !/usr/bin/perl miniupnpd/1.0 remote denial of service exploit Copyright 2015 c Todor Donev email protected http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg The SSDP protocol can discover Plug & Play devices, with uPnP...
INFOMARK IMW-C920W MiniUPnPd 1.0 - Denial of Service
INFOMARK IMW-C920W MiniUPnPd 1.0 - Denial of Service !/usr/bin/perl miniupnpd/1.0 remote denial of service exploit Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg The SSDP protocol can discover Plug & Play devices, with...
Mac OS X DMG UFS ffs_mountfs Integer Overflow - Ver2 (CVE-2007-0229)
An integer overflow vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
MiniUPnPd 1.4 Denial of Service (DoS) Exploit
This module allows remote attackers to cause a denial of service DoS in MiniUPnP 1.0 server via a specifically crafted UDP request. Module Options msf use auxiliary/dos/upnp/miniupnpd/dos msf undefineddos show actions ...actions... msf undefineddos set ACTION msf undefineddos show options ...show...
MiniUPnP Multiple Denial of Service Vulnerabilities (TCP)
MiniUPnP is prone to multiple denial of service DoS vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2013-0229
CVE-2013-0229 is a vulnerability in MiniUPnP MiniUPnPd prior to 1.4 where the ProcessSSDPRequest function (minissdp.c) contains a boundary error that can trigger a buffer over-read. A remote attacker can send a crafted SSDP/M-SEARCH request to cause a denial of service (service crash). The issue ...
MiniUPnP < 1.4 Multiple Vulnerabilities
According to its banner, the version of MiniUPnP running on the remote host is prior to 1.4. It is, therefore, affected by the following vulnerabilities : - An out-of-bounds read error exists in the ProcessSSDPRequest function in file minissdp.c that allows an unauthenticated, remote attacker to...
ZDI-12-133 : GE Proficy Historian ihDataArchiver.exe Multiple Opcode Parsing Remote Code Execution Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-133 : GE Proficy Historian ihDataArchiver.exe Multiple Opcode Parsing Remote Code Execution Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-12-133 August 3, 2012 - -- CVE ID: CVE-2012-0229 - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A...
CVE-2012-0229
The CVE-2012-0229 vulnerability affects GE Intelligent Platforms Proficy Historian: ihDataArchiver (ihDataArchiver.exe / ihDataArchiver_x64.exe) in Proficy Historian 4.5 and earlier. A memory corruption flaw exists in the Data Archiver service that processes network traffic on TCP port 14000, all...
CVE-2013-0229
creationtimestamp| type| source ---|---|--- 2012-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38249 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/upnp/miniupnpddos.rb 2018-05-29 15:50:33+00:00| seen|...
Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)
This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2011-0229
Apple Type Services (ATS) in OS X up to 10.6.8 is affected by CVE-2011-0229 due to an out-of-bounds memory access when handling embedded Type 1 fonts, enabling remote code execution via a crafted document. Apple’s advisory for Security Update 2011-006 (and related Lion updates) remedies this by u...
CVE-2010-0229
Technical details are not publicly available in the provided documents; no specific affected products, versions, weaknesses, or fixes are described. Monitor for updates.
Microsoft Windows打印后台程序本地信息泄露漏洞(MS09-022)
BUGTRAQ ID: 35208 CVECAN ID: CVE-2009-0229 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的打印服务没有正确的检查分隔符页面中可能包含的文件，攻击者可以登录到系统并创建特制的分隔符页面，导致读取或打印系统上的任何文件。即使用户没有管理访问权，也可以执行这些操作。但是，匿名用户无法利用此漏洞，也无法以远程方式利用此漏洞。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows...
CVE-2009-0229
The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."...
CVE-2009-0229
The CVE-2009-0229 vulnerability affects the Windows Print Spooler across multiple Windows variants (Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2). It is a local information-disclosure flaw where a crafted Separator Page enables local users to read arbitrary files ...