CVE-2015-0930

SerVision HVG Video Gateway devices with firmware older than 2.2.26a100 contain a hardcoded administrator password in the web interface, allowing remote attackers to gain admin access via an HTTP session. Affected product: SerVision HVG Video Gateway; root cause: hardcoded credentials in the web ...

CVE-2014-0930

CVE-2014-0930 involves IBM AIX 5.3, 6.1, 7.1 and VIOS 2.2.x where the ptrace() syscall can be abused via a crafted PT_LDINFO operation. The root cause is a flaw in ptrace handling that may allow local users to crash the system (DoS) and potentially read kernel memory. Connected telemetry confirms...

CVE-2014-0930 - Kernel Memory Leak And Denial Of Service Condition in IBM AIX

Vulnerability title: Kernel Memory Leak And Denial Of Service Condition in IBM AIX CVE: CVE-2014-0930 Vendor: IBM Product: AIX Affected version: 5.3, 6.1 and 7.1 releases VIOS 2.2. Fixed version: Interim version Reported by: Tim Brown Details: It has been identified that the ptrace system call ca...

AIX 6.1 TL 8 : ptrace (IV58948)

IBM AIX is vulnerable to a denial of service, caused by an error in the ptrace function. A local attacker could exploit this vulnerability to cause a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX 6.1 TL 9 : ptrace (IV59615)

IBM AIX is vulnerable to a denial of service, caused by an error in the ptrace function. A local attacker could exploit this vulnerability to cause a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX 7.1 TL 2 : ptrace (IV58861)

IBM AIX is vulnerable to a denial of service, caused by an error in the ptrace function. A local attacker could exploit this vulnerability to cause a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX ptrace Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri May 2 09:58:11 CDT 2014 | Updated: Tue May 20 14:12:02 CDT 2014 | Update: VIOS level clarification | Update: Corrected APARs | Update: New tar file with missing Iterim Fix The most recent version of this documen...

Oracle Linux 6 : NetworkManager (ELSA-2011-0930)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0930 advisory. 0.8.1-9el61.1 - core: CVE-2011-2176: check for authorization when activating shared wifi connections rh 705806 Tenable has extracted the preceding description...

ESA-2013-010: EMC AlphaStor Buffer Overflow Vulnerability

ESA-2013-010.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-010: EMC AlphaStor Buffer Overflow Vulnerability EMC Identifier: ESA-2013-010 EMC Identifier: NW147263 CVE Identifier: CVE-2013-0930 Severity Rating: CVSS v2 Base Score: 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C Affected product: EMC...

CVE-2013-0930

CVE-2013-0930 concerns EMC AlphaStor 4.0 (prior to build 814). Affected component: Drive Control Program (DCP) / rrobotd.exe. Root cause: a stack/buffer boundary issue when processing certain device-name related commands, leading to a buffer overflow. Impact: unauthenticated remote attackers coul...

RedHat Update for NetworkManager RHSA-2011:0930-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-0930

The CVE-2012-0930 entry concerns the Schneider Electric Modicon Quantum PLC. All connected sources describe a Cross-Site Scripting (XSS) vulnerability in the Quantum PLC’s web context, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected component...

RHEL 6 : NetworkManager (RHSA-2011:0930)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0930 advisory. - NetworkManager: Did not honour PolicyKit authadmin action element by creation of Ad-Hoc wireless networks CVE-2011-2176 Note that Nessus has not...

CVE-2010-0930

The vulnerability CVE-2010-0930 affects Perforce Server 2008.1 (p4s.exe). A crafted data sequence containing 0xDC 0xFF 0xFF 0xFF immediately before the client protocol version number can cause a denial of service (infinite loop). Connected sources consistently describe this as a DoS caused by tha...

SLES9: Security update for samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: samba For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015059 within the SuSE...

Gentoo Security Advisory GLSA 200909-14 (horde horde-imp horde-passwd)

The remote host is missing updates announced in advisory GLSA 200909-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200909-14 : Horde: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200909-14 Horde: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Horde: Gunnar Wrobel reported an input sanitation and directory traversal flaw in framework/Image/Image.php, related to the 'HordeImage...

openSUSE Security Update : imp (imp-659)

Version update to IMP 4.1.6 fixes a problem with validating HTTP requests that allowed attackers to delete emails CVE-2007-6018 and some cross-site-scripting issues CVE-2009-0930. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian Security Advisory DSA 1770-1 (imp4)

The remote host is missing an update to imp4 announced via advisory DSA 1770-1. OpenVAS Vulnerability Test $Id: deb17701.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1770-1 imp4 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1770-1 : imp4 - Insufficient input sanitising

Several vulnerabilities have been found in imp4, a webmail component for the horde framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4182 It was discovered that imp4 suffers from a cross-site scripting XSS attack via the user field in an IM...