191 matches found
CentOS Security Advisory CESA-2009:1060 (pidgin)
The remote host is missing updates to pidgin announced in advisory CESA-2009:1060. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
CentOS Security Advisory CESA-2009:1060 (pidgin)
The remote host is missing updates to pidgin announced in advisory CESA-2009:1060. CESA-2009:1060 64052 3 $Id: ovcesa20091060.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1060 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-1060
CVE-2009-1060 : A vulnerability in Apple Safari on Mac OS X 10.5.6 that permits remote code execution via clicking a link; vector is described as unknown. Demonstrated by Charlie Miller at Pwn2Own 2009. The connected documents do not provide detailed root cause, affected component versions beyond...
FreeBSD Ports: zgv
The remote host is missing an update to the system as announced in the referenced advisory. VID a813a219-d2d4-11da-a672-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Immunity Canvas: WPSNIPLETS_EXEC
Name| wpsnipletsexec ---|--- CVE| CVE-2008-1060 Exploit Pack| CANVAS Description| Wordpress Plugin Sniplets 1.1.2 Remote Code Execution exploict Notes| CVE Name: CVE-2008-1060 VENDOR: WordPress Repeatability: Infinite References: http://seclists.org/bugtraq/2008/Feb/0402.html CVE Url:...
CVE-2008-1060
Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter...
CVE-2008-1060
The CVE affects the Sniplets WordPress plugin, specifically versions 1.1.2 and 1.2.2, where an eval injection in modules/execute.php allows remote attackers to execute arbitrary PHP code via the text parameter. This results in remote code execution with the webserver user’s privileges, aligning w...
Debian: Security Advisory (DSA-1060-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1060-1 : kernel-patch-vserver - programming error
Jan Rekorajski discovered that the kernel patch for virtual private servers does not limit context capabilities to the root user within the virtual server, which might lead to privilege escalation for some virtual server specific operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...
[SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1037-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1037-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2006 http://www.debian.org/security/faq -...
CVE-2006-1060
Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required...
CVE-2006-1060
CVE-2006-1060 describes a heap-based buffer overflow in the image viewers zgv (before 5.8) and xzgv (before 0.8) that can be triggered by a JPEG image with more than 3 output components (e.g., CMYK/YCCK). The flaw allows user-assisted or remote exploitation to execute arbitrary code due to under-...
[security bulletin] SSRT4884 HP-UX TCP/IP Remote Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00576017 Version: 8 HPSBUX01164 SSRT4884 HP-UX TCP/IP Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date:...
UnixWare ICMP Message Handling Denial of Service
Release Date: 2005-09-05 Critical: Less critical Impact: DoS Where: From remote Solution Status: Vendor Patch OS: UnixWare 7.x.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference: CAN-2004-0790 CAN-2004-0791 CAN-2004-1060 CAN-2005-00...
HP-UX PHNE_33427 : s700_800 11.04 (VVOS) cumulative ARPA Transport patch
s700800 11.04 VVOS cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP. This vulnerability could be remotely exploited by an unauthorized user to cause a Denial of...
HP-UX PHNE_32606 : s700_800 11.23 cumulative ARPA Transport patch
s700800 11.23 cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP. This vulnerability could be remotely exploited by an unauthorized user to cause a Denial of ServiceDo...
HP-UX PHNE_26125 : HP-UX TCP/IP Remote Denial of Service (DoS) (HPSBUX01164 SSRT4884 rev.9)
s700800 11.00 ndd1M cumulative patch : A potential security vulnerability has been identified with HP-UX running TCP/IP. This vulnerability could be remotely exploited by an unauthorized user to cause a Denial of ServiceDoS. References: NISCC VU532967, CAN-2004-0790, CAN-2004-0791, CAN-2004-1060...
CVE-2004-1060
CVE-2004-1060 enables a denial-of-service via forged ICMP PMTU-discovery packets that degrade TCP throughput. Connected advisories show affected BIG-IP products and data-plane components; vulnerable versions include BIG-IP LTM/AAM/AFM/etc. for 10.x–11.x releases (e.g., 11.0.0–11.6.0, 10.0.0–10.2....
MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution (893066) (uncredentialed check)
The remote host runs a version of Windows that has a flaw in its TCP/IP stack. The flaw may allow an attacker to execute arbitrary code with SYSTEM privileges on the remote host or to perform a denial of service attack against the remote host. Proof of concept code is available to perform a denia...