320 matches found
Microsoft Office Information Disclosure Vulnerability (2909976)
This host is missing an important security update according to Microsoft Bulletin MS13-104. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Fedora 17 : kernel-3.7.9-104.fc17 (2013-3106)
This update contains a fix for the netlink out-of-bounds access issue which could allow a local user to gain privileged access. All users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
Microsoft Office SharePoint Server 2007 - Remote Code Execution (MS10-104) (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Microsoft Office SharePoint Server 20...
Microsoft Office SharePoint Server 2007 Remote Code Execution
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)
This host is missing a critical security update according to Microsoft Bulletin MS10-104 SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft SharePoint Malformed Request Remote Code Execution (MS10-104; CVE-2010-3964)
Document Conversions Launcher Service schedules and initiates the document conversions on a server. When Microsoft Office SharePoint Server 2007 passes the service a document conversion request, the Document Conversions Launcher Service calls the appropriate document converter. A remote code...
Mandriva Update for samba MDKSA-2007:104-1 (samba)
Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKSA-2007:104-1 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Mandriva Update for mandriva-doc MDKA-2007:104 (mandriva-doc)
Check for the Version of mandriva-doc OpenVAS Vulnerability Test Mandriva Update for mandriva-doc MDKA-2007:104 mandriva-doc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
CVE-2008-2474
Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 PCU400 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the 1 IEC60870-5-101 or 2 IEC60870-5-104 communication protocol to the X87 web interface...
Buffer overflow
Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 PCU400 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the 1 IEC60870-5-101 or 2 IEC60870-5-104 communication protocol to the X87 web interface...
CVE-2008-2474
CVE-2008-2474 describes a buffer overflow in the ABB PCU400 x87 web interface. The vulnerability affects ABB PCU400 versions 4.4–4.6, where a specially crafted packet sent via IEC60870-5-101 or IEC60870-5-104 to the X87 web interface can allow a remote attacker to execute arbitrary code. The issu...
CVE-2008-2474
Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 PCU400 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the 1 IEC60870-5-101 or 2 IEC60870-5-104 communication protocol to the X87 web interface...
ABB PCU400 'x87'远程缓冲区溢出漏洞
BUGTRAQ ID: 31391 CVE ID：CVE-2008-2474 CNCVE ID：CNCVE-20082474 ABB PCU400提供基于SCADA的系统中进行先进有效的数据采集所需的功能和性能。 ABB PCU400处理IEC60870-5-101和IEC60870-5-104通信协议存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 ABB PCU400应用程序作为使用IEC-870-5-104协议的RTUs和SCADA服务器之间的通信网关使用。发送特殊构建的报文到TCP 8087上的X87 WEB接口，可导致攻击者完全访问PCU400服务器。 ABB...
ABB PCU400 vulnerable to buffer overflow
Overview ABB PCU400 contains a vulnerability which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The ABB PCU400 application serves as a communication gateway between RTUs that use the IEC-870-5-104 protocol and the SCADA server. The...
Gentoo Security Advisory GLSA 200504-06 (sharutils)
The remote host is missing updates announced in advisory GLSA 200504-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
DTSA-104-1 wireshark - several vulnerabilities
Bulletin has no description...
Unfixed XSS vulnerability at 104.com
Security researcher kusomiso.com, has submitted on 09/09/2007 a cross-site-scripting XSS vulnerability affecting 104.com, which at the time of submission ranked 125616 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is currently...
Unfixed XSS vulnerability at www.gyte.edu.tr
Security researcher cyber, has submitted on 06/04/2007 a cross-site-scripting XSS vulnerability affecting www.gyte.edu.tr, which at the time of submission ranked 146945 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/04/2007. It is currently...
Ubuntu 4.10 : sharutils vulnerability (USN-104-1)
Joey Hess discovered that 'unshar' created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Note that Tenable Network Security has extracted the preceding description block...
