CVE-2012-0285

CVE-2012-0285 involves Stoneware webNetwork with multiple XSS vulnerabilities in versions before 6.0.8.0. Exploitation vectors are not specified in the provided documents, but the CVE description states that remote attackers can inject arbitrary web script or HTML, affecting integrity (I:P) with ...

Fedora Update for krb5 FEDORA-2011-14650

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE Security Update : krb5 (openSUSE-SU-2011:0348-1)

A remote attacker may be able to make kadmind free an invalid pointer, leading to a crash of the service CVE-2011-0285. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-4373. The text...

Fedora Update for krb5 FEDORA-2011-5343

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for krb5 FEDORA-2011-5345

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-0285

The processchpwrequest function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 aka krb5 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted request that triggers a...

RHEL 6 : krb5 (RHSA-2011:0447)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0447 advisory. - krb5: kadmind invalid pointer free MITKRB5-SA-004 CVE-2011-0285 Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2011-0285

CVE-2011-0285 affects MIT Kerberos 5 kadmind (krb5) 1.7–1.9; the process_chpw_request routine in schpw.c frees an invalid pointer, enabling remote code execution or a daemon crash via a crafted password-change request. Mitigation: upgrade krb5 to a patched release that includes the fix (listed in...

Moderate: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2011-004 MIT krb5 Security Advisory 2011-004 Original release: 2011-04-12 Last update: 2011-04-12 Topic: kadmind invalid pointer free CVE-2011-0285 CVSSv2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2 Base Score: 10 Access...

CVE-2011-0285

creationtimestamp| type| source ---|---|--- 2011-04-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35606...

Ubuntu Update for gnome-screensaver vulnerabilities USN-907-1

Ubuntu Update for Linux kernel vulnerabilities USN-907-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9071.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for gnome-screensaver vulnerabilities USN-907-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-907-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-907-1] gnome-screensaver vulnerabilities

=========================================================== Ubuntu Security Notice USN-907-1 March 08, 2010 gnome-screensaver vulnerabilities CVE-2010-0285, CVE-2010-0422 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.1...

Ubuntu 8.10 / 9.04 / 9.10 : gnome-screensaver vulnerabilities (USN-907-1)

It was discovered that gnome-screensaver did not correctly lock all screens when monitors get hotplugged. An attacker with physical access could use this flaw to gain access to a locked session. CVE-2010-0285 It was discovered that gnome-screensaver did not correctly handle keyboard grab when...

USN-907-1: gnome-screensaver vulnerabilities

It was discovered that gnome-screensaver did not correctly lock all screens when monitors get hotplugged. An attacker with physical access could use this flaw to gain access to a locked session. CVE-2010-0285 It was discovered that gnome-screensaver did not correctly handle keyboard grab when...

CVE-2010-0285

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor...

CVE-2010-0285

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor...

CVE-2010-0285

The CVE-2010-0285 issue affects gnome-screensaver (versions 2.14.3, 2.22.2, 2.27.x, 2.28.0, 2.28.3). The root cause is when the X configuration enables the extend screen option, which allows physically proximate attackers to bypass screen locking by attaching an external monitor, potentially expo...

CVE-2010-0285

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor...