109 matches found
Adobe ColdFusion APSB13-03 Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit...
CVE-2013-0629
creationtimestamp| type| source ---|---|--- 2013-04-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24946 2016-05-12 09:12:03+00:00| seen| MISP/57344868-a120-4004-90f6-4c49950d210f 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05...
CVE-2013-0629
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013...
CVE-2013-0629
CVE-2013-0629 is an Adobe ColdFusion directory traversal vulnerability affecting ColdFusion 9.0, 9.0.1, 9.0.2, and 10 when a password is not configured. It allows an attacker to access restricted directories via unspecified vectors and was exploited in the wild in January 2013. Connected sources ...
Scientific Linux Security Update : krb5 on SL5.x i386/x86_64
A use-after-free flaw was discovered in the MIT Kerberos administration daemon, kadmind. A remote, authenticated attacker could use this flaw to crash the kadmind daemon. Administrative privileges are not required to trigger this flaw, as any realm user can request information about their own...
Apple Safari Webkit Multiple Vulnerabilities - March12 (Windows)
The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafariwebkitmultvulnmar12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Apple Safari Webkit Multiple Vulnerabilities - March12 Windows Authors: Rachana Shetty Copyrigh...
Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows
Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...
CVE-2012-0629
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...
CVE-2012-0629
CVE-2012-0629 concerns WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption–related DoS via a crafted website, and is noted as a different vulnerability from other WebKit CVEs in Apple advis...
CVE-2012-0629
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...
Gentoo Security Advisory GLSA 201201-13 (mit-krb5)
The remote host is missing updates announced in advisory GLSA 201201-13. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
CVE-2011-0629
CVE-2011-0629 documents confirm a cross-site request forgery (CSRF) flaw affecting Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1. The underlying issue enables remote attackers to hijack a user’s authenticated session via unknown vectors. The public materials do not specify the exact attack vectors,...
CVE-2011-0629
Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
SuSE 11 Security Update : krb5 (SAT Patch Number 2235)
Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...
Fedora 11 : krb5-1.6.3-29.fc11 (2010-6108)
Sol Jerome noticed that the kadmind server daemon could be made to dereference freed memory and crash. This update backports the changeset which contains the fix for this bug CVE-2010-0629. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
RHEL 5 : krb5 (RHSA-2010:0343)
Updated krb5 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
openSUSE Security Update : krb5 (openSUSE-SU-2010:0099-1)
Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-2267. The text description of this plugin is...
openSUSE Security Update : krb5 (openSUSE-SU-2010:0099-1)
Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-2267. The text description of this plugin is...
[SECURITY] [DSA 2031-1] New krb5 packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-2031-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 11, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2031-1] New krb5 packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-2031-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 11, 2010 http://www.debian.org/security/faq -...