Progea Movicon 'TCPUploadServer.exe' Multiple Vulnerabilities

Progea Movicon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2963

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service crash via a crafted packet to TCP port 10651...

Authentication flaw

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service crash via a crafted packet to TCP port 10651...

CVE-2011-2963

CVE-2011-2963 affects Progea Movicon 11.2 before Build 1084. TCPUploadServer.exe on port 10651 permits access to critical functions without authentication, enabling remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash). Co...

CVE-2011-2963

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service crash via a crafted packet to TCP port 10651...

SUSE: Security Advisory for MozillaFirefox, seamonkey, MozillaThunderbird (SUSE-SA:2011:022)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : sysconfig (openSUSE-SU-2011:0353-1)

This update fixes the file permissions for ifcfg- files. For 11.2 this update also fixes bnc637183 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update sysconfig-3953. The text description of this...

openSUSE Security Update : krb5 (openSUSE-SU-2011:0348-1)

A remote attacker may be able to make kadmind free an invalid pointer, leading to a crash of the service CVE-2011-0285. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-4373. The text...

openSUSE Security Update : libopensc2 (openSUSE-SU-2011:0049-1)

Specially crafted smart cards could cause a buffer overflow in opensc CVE-2010-4523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libopensc2-3737. The text description of this plugin is C...

openSUSE Security Update : openslp (openSUSE-SU-2010:0992-1)

the openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openslp-3310. The text description of...

openSUSE Security Update : kernel-debug (openSUSE-SU-2011:0003-1)

This update of the openSUSE 11.2 kernel fixes various bugs and lots of security issues. Following security issues have been fixed: CVE-2010-4258: A local attacker could use a Oops kernel crash caused by other flaws to write a 0 byte to a attacker controlled address in the kernel. This could lead ...

SuSE Update for xorg-x11 SUSE-SA:2011:016

Check for the Version of xorg-x11 OpenVAS Vulnerability Test SuSE Update for xorg-x11 SUSE-SA:2011:016 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SuSE Update for flash-player SUSE-SA:2011:018

Check for the Version of flash-player OpenVAS Vulnerability Test SuSE Update for flash-player SUSE-SA:2011:018 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

SuSE Update for kernel SUSE-SA:2011:017

Check for the Version of kernel OpenVAS Vulnerability Test SuSE Update for kernel SUSE-SA:2011:017 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

SUSE: Security Advisory for xorg-x11 (SUSE-SA:2011:016)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for flash-player (SUSE-SA:2011:018)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0461

/etc/init.d/boot.localfs in the aaabase package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab...

Cross site scripting

/etc/init.d/boot.localfs in the aaabase package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab...

CVE-2011-0461

CVE-2011-0461 affects the openSUSE/SUSE package aaa_base. The flaw is in /etc/init.d/boot.localfs and allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab. Affected products/versions are aaa_base in SUSE/OpenSUSE 11.2 prior to 11.2-43.48.1 and in OpenSUSE 11.3 pri...

CVE-2011-0461

/etc/init.d/boot.localfs in the aaabase package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab...