125 matches found
RHEL 6 : glibc (RHSA-2012:0393)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0393 advisory. - glibc: FORTIFYSOURCE format string protection bypass via nargs integer overflow CVE-2012-0864 Note that Nessus has not tested for this issue but ha...
CVE-2012-0393
The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object...
CVE-2012-0393
The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object...
CVE-2012-0393
CVE-2012-0393 concerns Apache Struts 2.x. The vulnerability lies in the ParameterInterceptor component not preventing access to public constructors, allowing a remote attacker to cause the creation of Java objects and thus “trigger” the creation or overwrite of arbitrary files via a crafted param...
Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20110223-asa)
The remote Cisco ASA device is missing a security patch and may be affected by the following issues : - When configured for transparent firewall mode, a packet buffer exhaustion vulnerability could cause the appliance to stop forwarding traffic. CVE-2011-0393 - When SCCP inspection is enabled, a...
openSUSE Security Update : w3m (openSUSE-SU-2010:0393-1)
w3m did not handle embedded nul characters in the common name and in subject alternative names of x509 certificates. CVE-2010-2074 has been assigned to this issue. This update also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable...
Mandriva Linux Security Advisory : cups (MDVSA-2010:073-1)
Multiple vulnerabilities has been found and corrected in cups : CUPS in does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a the product's web interface,...
openSUSE Security Update : cups (cups-2102)
lppasswd when running setuid or setgid still honors environment variables that specify the location of message files. Local attackers could exploit that to gather information by using crafted format strings CVE-2010-0393. The previous fix for a use-after-free vulnerability CVE-2009-3553 was...
openSUSE Security Update : cups (cups-2102)
lppasswd when running setuid or setgid still honors environment variables that specify the location of message files. Local attackers could exploit that to gather information by using crafted format strings CVE-2010-0393. The previous fix for a use-after-free vulnerability CVE-2009-3553 was...
CUPS < 1.4.3 Security Bypass Vulnerability
Common UNIX Printing System CUPS is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2010-0393
The cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with...
CVE-2010-0393
CVE-2010-0393 affects CUPS: the cupsGetlang function in lppasswd historically uses an environment variable to select the localization file, allowing local privilege escalation via crafted localization data with format string specifiers in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1. The vulnerability’s r...
[SECURITY] [DSA 2007-1] New cups packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2007-1 [email protected] http://www.debian.org/security/ Nico Golde March 3rd, 2010 http://www.debian.org/security/faq -...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : cups, cupsys vulnerabilities (USN-906-1)
It was discovered that the CUPS scheduler did not properly handle certain network operations. A remote attacker could exploit this flaw and cause the CUPS server to crash, resulting in a denial of service. This issue only affected Ubuntu 8.04 LTS, 8.10, 9.04 and 9.10. CVE-2009-3553, CVE-2010-0302...
USN-906-1: CUPS vulnerabilities
It was discovered that the CUPS scheduler did not properly handle certain network operations. A remote attacker could exploit this flaw and cause the CUPS server to crash, resulting in a denial of service. This issue only affected Ubuntu 8.04 LTS, 8.10, 9.04 and 9.10. CVE-2009-3553, CVE-2010-0302...
Mandriva Update for mandriva-doc MDVA-2010:072 (mandriva-doc)
Check for the Version of mandriva-doc OpenVAS Vulnerability Test Mandriva Update for mandriva-doc MDVA-2010:072 mandriva-doc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for dhcp MDVA-2010:073 (dhcp)
Check for the Version of dhcp OpenVAS Vulnerability Test Mandriva Update for dhcp MDVA-2010:073 dhcp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CVE-2009-0393
The CVE-2009-0393 entry concerns the Motorola Wimax modem CPEi300, affecting the sysconf.cgi component. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote authenticated users to inject arbitrary web script or HTML via the page parameter . Publicly available exploit referenc...
CVE-2009-0393
creationtimestamp| type| source ---|---|--- 2009-01-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7915...
Debian Security Advisory DSA 524-1 (rlpr)
The remote host is missing an update to rlpr announced via advisory DSA 524-1. OpenVAS Vulnerability Test $Id: deb5241.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 524-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...