Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)

This host is missing a critical security update according to Microsoft Bulletin MS09-025. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)

This host is missing a critical security update according to Microsoft Bulletin MS09-025. OpenVAS Vulnerability Test $Id: secpodms09-025.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege 968537 Authors: Antu Sanadi Updated By: Madhuri D ...

MS09-025: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)

The remote host contains a version of the Windows kernel that is affected by multiple vulnerabilities : - A failure of the Windows kernel to properly validate changes in certain kernel objects allows a local user to run arbitrary code in kernel mode. CVE-2009-1123 - Insufficient validation of...

Immunity Canvas: BARRYVAN_INCLUDE

Name| barryvaninclude ---|--- CVE| CVE-2008-1126 Exploit Pack| CANVAS Description| barryvancompo-0.3 remote file include Notes| CVE Name: CVE-2008-1126 VENDOR: barryvancompo Repeatability: Infinite References: http://securityreason.com/exploitalert/3471 CVE Url:...

CVE-2008-1126

The CVE-2008-1126 issue affects Barryvan Compo Manager 0.3. A PHP remote file inclusion vulnerability exists in main.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the pageURL parameter. The vulnerability is described consistently across sources (NVD, CVE listings, ...

CVE-2007-1126

CVE-2007-1126 affects xtcommerce via a directory-traversal flaw in index.php where the template parameter can be manipulated with .. to read arbitrary files. The root cause is improper sanitization of the template parameter, enabling unauthorized file access. Documentation lists the vulnerability...

Debian DSA-1126-1 : asterisk - buffer overflow

A problem has been discovered in the IAX2 channel driver of Asterisk, an Open Source Private Branch Exchange and telephony toolkit, which may allow a remote attacker to cause a crash of the Asterisk server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

CVE-2006-1126

Gallery 2 up to 2.0.2 has an IP-spoofing flaw where a remote attacker can spoof X-Forwarded-For, which is trusted over REMOTE_ADDR. Affected: Gallery 2.x prior to 2.0.3. Root cause: server uses X_FORWARDED_FOR in IP checks. Impact: potential partial confidentiality/integrity exposure; possible fo...

APPLE-SA-2005-10-31 Mac OS X v10.4.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2005-10-31 Mac OS X v10.4.3 Mac OS X v10.4.3 and Mac OS X Server v10.4.3 are now available and deliver the following security enhancements: Finder CVE-ID: CVE-2005-2749 Available for: Mac OS X v10.4.2, Mac OS X Server v10.4.2 Impact: File...

CVE-2005-1126

CVE-2005-1126 is a kernel memory disclosure vulnerability tied to the SIOCGIFCONF (ifconf) path. In FreeBSD 4.x (4.0–4.11) and 5.x (5.0–5.4), the ifconf code may copy uninitialized kernel memory to user space because the buffer is not cleared before use, enabling local users to obtain portions of...

CVE-2003-1126

CVE-2003-1126 affects Sun One/iPlanet Web Server running on Windows platforms with SP3–SP5. The vulnerability permits remote denial of service, as described in multiple sources. The connected documents provide the same general impact and do not specify affected product versions beyond SP3–SP5 or ...

CVE-2003-1126

Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service...

CVE-2002-1126

Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunloa...

CVE-2001-1126

Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service flood via DNS spoofing of the update.symantec.com site...

CVE-1999-1126

Cisco Resource Manager CRM 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from 1 swimswd.log, 2 swimdebug.log, 3 dbidebug.log, and 4 temporary files...

CVE-1999-1126

Cisco Resource Manager (CRM) 1.1 and earlier stores sensitive configuration data in files with insecure permissions, enabling local users to read usernames, passwords, and SNMP community strings from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files beginning with D...

CVE-2000-1126

CVE-2000-1126 affects HP-UX 11.00 and earlier. The vulnerability is in the auto_parms and set_parms components and, per the sources, allows remote attackers to execute arbitrary commands or cause a denial of service. The connected documents confirm the affected software and the underlying impact ...

CVE-1999-1126

Cisco Resource Manager CRM 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from 1 swimswd.log, 2 swimdebug.log, 3 dbidebug.log, and 4 temporary files...