CVE-2012-0947

Heap-based buffer overflow in the vqadecodechunk function in the VQA codec vqavideo.c in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a...

CVE-2010-0947

CVE-2010-0947 is a cross-site scripting (XSS) vulnerability affecting Max Network Technology BBSMAX versions 3.0, 4.1 and 4.2. The flaw exists in post.aspx and allows remote attackers to inject arbitrary web script or HTML via the action parameter. The NVD notes a MEDIUM severity (CVSS v2: AV:N/A...

SLES9: Security update for unarj

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: unarj For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015411 within the SuSE...

SLES9: Security update for unarj

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: unarj For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015411 within the SuSE...

SuSE9 Security Update : unarj (YOU Patch Number 9523)

A directory traversal bug was spotted in the unarj program CVE-2004-0947. Additionaly SUSE Security audited unarj and found several buffer overflows which are also fixed by this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Mandriva Update for krb5 MDVSA-2008:070 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:070 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for krb5 MDVSA-2008:069 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:069 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for krb5 MDVSA-2008:069 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:069 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for krb5 FEDORA-2008-2647

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200803-31 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 200803-31. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200411-29 (unarj)

The remote host is missing updates announced in advisory GLSA 200411-29. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200803-31 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 200803-31. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: unarj

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Kerberos < 1.6.4 vulnerability

The remote host is probably affected by the vulnerabilities described in CVE-2008-0062, CVE-2008-0063, CVE-2008-0947, CVE-2008-0948 Impact CVE-2008-0062: An unauthenticated remote attacker may cause a krb4-enabled KDC to crash, expose information, or execute arbitrary code. Successful exploitatio...

Debian DSA-1524-1 : krb5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the kdc component of the krb5, a system for authenticating users and services on a network. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0062 An unauthenticated remote attacker may cause a...

krb5 security update

CentOS Errata and Security Advisory CESA-2008:0164 Updated krb5 packages that resolve several issues and fix multiple bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network...

USN-587-1: Kerberos vulnerabilities

It was discovered that krb5 did not correctly handle certain krb4 requests. An unauthenticated remote attacker could exploit this flaw by sending a specially crafted traffic, which could expose sensitive information, cause a crash, or execute arbitrary code. CVE-2008-0062, CVE-2008-0063 A flaw wa...

MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2008-002 MIT krb5 Security Advisory 2008-002 Original release: 2008-03-18 Last update: 2008-03-18 Topic: array overrun in RPC library used by kadmind CVE-2008-0947, CVE-2008-0948 VU374121 Use of high-numbered file descriptors in the RPC...

openSUSE 10 Security Update : krb5 (krb5-5081)

This update fixes the following security bugs in krb5/krb5-server : - CVE-2008-0062: null/dangling pointer needs enabled krb4 support - CVE-2008-0063: possible operations on uninitialized buffer content/information leak needs enabled krb4 support - CVE-2008-0947/CVE-2008-0948: out-of-bound array...

CVE-2008-0947

CVE-2008-0947 is a buffer overflow in the MIT Kerberos 5 RPC library (used by libgssrpc and kadmind) affecting krb5 1.4–1.6.3. An attacker could trigger the overflow by exhausting file descriptors, enabling remote code execution. Connected advisories note this vulnerability alongside related issu...