CVE-2015-0717

Cisco Unified Communications Manager 10.0(1.10000.12) contains a local privilege-escalation vulnerability (CVE-2015-0717) where an authenticated, local attacker can gain root privileges by injecting shell commands via an unsafely handled parameter. Root cause: failure to sanitize user input, enab...

Multiple Products Directory Server LDAP Buffer Overflows - Ver2 (CVE-2006-0717)

An error was found in the way several LDAP servers from several vendors handle malformed LDAP requests. This can be exploited to crash the service via a specially-crafted request sent to the LDAP server port...

Security Advisory - Remote Security Bypass Vulnerability on Huawei Android Devices

Android version 4.1.1 - 4.4.2 is prone to a remote security bypass vulnerability CVE-2013-6272: A vulnerability in the Android system allows an attacker to initiate or terminate arbitrary calls without the callphone permission. After investigation， we confirm that some Huawei smartphone and table...

CVE-2013-0717

CVE-2013-0717 involves multiple NEC mobile routers (AtermWR9500N/8600N/8370N/8160N and AtermWM3600R/3450RN) with cross-site request forgery in the web-based management utility. The CSRF allows remote attackers to hijack administrator authentication to perform actions such as initializing settings...

CVE-2013-0717

Multiple cross-site request forgery CSRF vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that 1...

RHEL 5 : Red Hat Network Satellite Server (RHSA-2011:0300)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0300 advisory. Red Hat Network Satellite Server RHN Satellite Server is a system management tool for Linux-based infrastructures. It allows for the...

CentOS Update for bind97 CESA-2012:0717 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

IBM WebSphere Application Server安全绕过漏洞

CVE ID: CVE-2012-0717 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 在启用特定SSL的虚拟主机配置中满足如下条件时，WebSphere Application Server允许远程攻击者绕过IBM HTTP Server上SSL客户端证书的验证： -使用“SSLEnable”启用SSL默认不启用。 -使用“SSLClientAuth requiredreset”启用SSL客户端验证默认不启用，“SSLClientAuth...

CVE-2012-0717

CVE-2012-0717 affects IBM WebSphere Application Server 7.0 (prior to 7.0.0.23) where a specific SSLv2 configuration with client authentication can allow a remote attacker to bypass X.509 client-certificate authentication via unspecified vectors. The condition requires: SSL enabled (SSLEnable), SS...

RHEL 5 : bind97 (RHSA-2012:0717)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0717 advisory. - bind: deleted domain name resolving flaw CVE-2012-1033 - bind: handling of zero length rdata can cause named to terminate unexpectedly...

Microsoft Windows Messenger Service Buffer Overrun Code Execution (CVE-2003-0717)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper validation of message length. A remote attacker may exploit this vulnerability by sending an overly long message to the target service. Successful exploitation may allow the attacker...

CVE-2011-0717

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

CVE-2011-0717

The CVE-2011-0717 issue affects Red Hat Network Satellite Server 5.4 (Spacewalk-related). The root cause is a session fixation flaw where session cookies can be manipulated, enabling an attacker to hijack a user’s session after login. Documented impact includes potential partial disclosure/integr...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update

Updated packages that fix two security issues are now available for Red Hat Network Satellite Server 5.4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

[SECURITY] [DSA 2014-1] New moin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2014-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 12, 2010 http://www.debian.org/security/faq -...

Debian DSA-2014-1 : moin - several vulnerabilities

Several vulnerabilities have been discovered in moin, a python clone of WikiWiki. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0668 Multiple security issues in MoinMoin related to configurations that have a non-empty superuser list, the xmlrpc...

[SECURITY] [DSA 2014-1] New moin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2014-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 12, 2010 http://www.debian.org/security/faq -...

Ubuntu: Security Advisory (USN-911-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-911-1: MoinMoin vulnerabilities

It was discovered that several wiki actions and preference settings in MoinMoin were not protected from cross-site request forgery CSRF. If an authenticated user were tricked into visiting a malicious website while logged into MoinMoin, a remote attacker could change the user's configuration or...

Fedora Update for moin FEDORA-2010-1712

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...