CVE-2009-1056

IBM Rational AppScan Enterprise prior to 5.5 FP1 is affected by CVE-2009-1056, where remote attackers can read arbitrary exported reports by forcefully browsing. Affected software is stated as IBM Rational AppScan Enterprise before 5.5 FP1; root cause is not elaborated beyond the ability to read ...

FreeBSD Security Advisory (FreeBSD-SA-06:14.fpu.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:14.fpu.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2008-1056

CVE-2008-1056 involves multiple stack-based buffer overflows in Symark PowerBroker versions 2.8–5.0.1 that allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. The vulnerability is triggered by oversized argv[0], enabling privilege escal...

Debian Security Advisory DSA 1103-1 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1103-1. OpenVAS Vulnerability Test $Id: deb11031.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1103-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1056-1 (webcalendar)

The remote host is missing an update to webcalendar announced via advisory DSA 1056-1. David Maciejak noticed that webcalendar, a PHP-Based multi-user calendar, returns different error messages on login attempts for an invalid password and a non-existing user, allowing remote attackers to gain...

Debian: Security Advisory (DSA-1103)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1097-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 exposes a local-privilege risk: there are no per-user restrictions for certain privileged actions outside the guest OS. Local users can perform operations such as changing system time, accessing hardware components, and stopping the VMware Tools service by exp...

VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0005 Synopsis: VMware ESX Server 2.5.4 Upgrade Patch 1 Patch URL: http://www.vmware.com/download/esx/esx-254-200610-patch.html...

Debian DSA-1056-1 : webcalendar - verbose error message

David Maciejak noticed that webcalendar, a PHP-based multi-user calendar, returns different error messages on login attempts for an invalid password and a non-existing user, allowing remote attackers to gain information about valid usernames. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

CVE-2006-1056

CVE-2006-1056 : A vulnerability in the Linux kernel (before 2.6.16.9) and FreeBSD on AMD64/7th–8th gen AMD processors causes FXSAVE/FXRSTOR to save/restore only certain x87 registers when an exception is pending. This can allow a local attacker to infer portions of the floating‑point state of oth...

ChangeLog-2.6.16.9

commit 9d395d1961a0eeb9e8b1ef2854f3ca8f0b985266 Author: Greg Kroah-Hartman [email protected] Date: Tue Apr 18 23:10:14 2006 -0700 Linux 2.6.16.9 commit 7466f9e72dac13452d871a3fb72fc7bd9c93c864 Author: Andi Kleen [email protected] Date: Wed Apr 19 07:17:31 2006 +0200 PATCH i386/x86-64: Fix x87 information...

CVE-2005-1056

The CVE describes a heap overflow in HP OpenView Network Node Manager (NNM) components affecting versions 6.2–6.4 and 7.01–7.50. Connected Nessus data attributes the flaw to the HP OpenView Topology Manager Daemon, which handles IP discovery/layout. An unauthenticated, remote attacker can send a ...

CVE-2003-1056

The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-1056

The CVE-2003-1056 entry concerns the ed editor on Sun Solaris 2.6, 7, and 8. It describes a local vulnerability where an attacker can create or overwrite arbitrary files through a symlink attack on temporary files, with complete confidentiality, integrity, and availability impact per CVSS. The vu...

CVE-2004-1056

Direct Rendering Manager DRM driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service X Server crash and possibly modify the video output...

CVE-2004-1056

Direct Rendering Manager DRM driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service X Server crash and possibly modify the video output...

CVE-2004-1056

Direct Rendering Manager DRM driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service X Server crash and possibly modify the video output...

CVE-2004-1056

CVE-2004-1056 involves the Direct Rendering Manager (DRM) drivers in Linux kernel 2.6. It is caused by insufficient DMA lock checking, which could allow an authorized client to send arbitrary values to the video card, potentially causing an X server crash or modifying the video output. The vulner...