IBM DB2 9.7 < Fix Pack 9a Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 9a. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that allows denial of service...

IBM DB2 9.1 TLS/SSL Multiple DoS Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is version 9.1. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that could allow denial of service attacks...

IBM Global Security Kit 7 < 7.0.4.50 / 8.0.14.x < 8.0.14.43 / 8.0.50.x < 8.0.50.20 Multiple Vulnerabilities

The remote Windows host has a version of IBM Global Security Kit prior to 7.0.4.50 / 8.0.14.43 / 8.0.50.20. It is, therefore, affected by the following vulnerabilities : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that could allow nonce...

APPLE-SA-2013-03-14-1 OS X Mountain Lion v10.8.3 and Security Update 2013-001

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-03-14-1 OS X Mountain Lion v10.8.3 and Security Update 2013-001 OS X Mountain Lion v10.8.3 and Security Update 2013-001 is now available and addresses the following: Apache Available for: Mac OS X 10.6.8, Mac OS X Server 10.6.8, OS X Lio...

Apple iPhone/iPad/iPod touch iOS 6.1之前版本安全绕过漏洞

BUGTRAQ ID: 57598 CVECAN ID: CVE-2013-0963 Apple iOS是由苹果公司开发的操作系统。 Apple iOS内身份认证服务中存在错误处理。当用户的AppleID证书验证失败时，用户的AppleID会被假定为空字符串。当有多个属于不同用户的系统进入这种状态时，依靠该认证方式的应用程序就会产生认证错误。 0 Apple iPhone 4.x Apple iPhone 3.x Apple iOS 3.x Apple iOS 2.x Apple Apple TV 5.x Apple Apple TV 4.x 厂商补丁： Apple -----...

CVE-2013-0963

CVE-2013-0963 affects Apple iOS Identity Services. An error handling flaw causes an AppleID to be treated as the empty string if certificate validation fails, potentially allowing a physically proximate attacker to bypass authentication. Apple addressed this in iOS 6.1 (HT5642). Connected sources...

CVE-2011-0963

The CVE-2011-0963 vulnerability affects Cisco NAC Guest Server system software where the RADIUS authentication configuration allows an unauthenticated user to bypass access restrictions and reach the protected network. Affects all NAC Guest Server versions prior to 2.0.3. Cisco PSIRT/ Cisco advis...

CVE-2010-0963

Cross-site scripting XSS vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information...

CVE-2010-0963

The CVE-2010-0963 entry documents a Cross-site Scripting (XSS) vulnerability in the index.php of the dl Download Ticket Service prior to version 0.7, where an attacker can inject arbitrary web script or HTML via the t parameter (linked to an invalid ticket ID). Affected: dl Download Ticket Service

CVE-2009-0963

creationtimestamp| type| source ---|---|--- 2009-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8226...

Fedora Update for pulseaudio FEDORA-2008-0963

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD Ports: lftp

The remote host is missing an update to the system as announced in the referenced advisory. VID d7af61c8-2cc0-11d8-9355-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: lftp

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-0963

EMC DiskXtender MediaStor 6.20.060 is affected by a format-string vulnerability in the RPC interface (UUID b157b800-aef5-11d3-ae49-00600834c15f). The service passes an unvalidated string to a formatting function, allowing remote authenticated users to execute arbitrary code with the privileges of...

iDefense Security Advisory 04.09.08: EMC DiskXtender MediaStor Format String Vulnerability

iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND EMC DiskXtender is a data backup and migration suite. It consists of several applications that are used to manage storing large quantities of files across multiple storage devices...

EMC DiskXtender MediaStor组件远程格式串处理漏洞

CVECAN ID: CVE-2008-0963 EMC DiskXtender是一款数据备份、迁移套件。 DiskXtender产品的MediaStor组件在处理UUID为b157b800-aef5-11d3-ae49-00600834c15f的RPC接口上请求时，服务没有正确地验证请求中格式串的内容。由于该格式串直接传送给了格式化函数，因此远程攻击者可以执行格式串攻击，导致以受影响服务的权限执行任意指令。必须要通过认证才能利用这个漏洞。 EMC DiskXtender 6.20.60 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Debian Security Advisory DSA 406-1 (lftp)

The remote host is missing an update to lftp announced via advisory DSA 406-1. OpenVAS Vulnerability Test $Id: deb4061.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 406-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0963

CVE-2007-0963 : Cisco Firewall Services Module (FWSM) 3.x prior to 3.1(3.3) is affected when logging at the debug level. The vulnerability allows remote attackers to cause a denial of service (device reboot) by sending packets that are not of common protocols (e.g., TCP/UDP), triggering a reboot ...

CVE-2006-0963

CVE-2006-0963 affects STLport 5.0.2. There are two reported buffer overflows: (1) long locale environment variables passed to a strcpy call in c_locale_glibc2.c, and (2) long arguments to unspecified functions in num_put_float.cpp. Local users could execute arbitrary code due to these conditions....

CVE-2005-0963

CVE-2005-0963 concerns an error in the Toshiba ACPI BIOS 1.6 that causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, preventing boot even when the MBR is not malformed. The description notes that there is debate on whether this constitute...