CVE-2011-1147

CVE-2011-1147 affects Asterisk Open Source and related builds: stack/heap buffer overflows in the UDPTL handling (decode_open_type and udptl_rx_packet) may allow a remote attacker to crash the process or execute arbitrary code. Affected products include Asterisk Open Source 1.4.x before 1.4.39.2,...

Fedora Update for asterisk FEDORA-2011-2558

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for asterisk FEDORA-2011-2438

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2011-2438 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for asterisk FEDORA-2011-2558

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2011-2558 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

FreeBSD Ports: asterisk14

The remote host is missing an update to the system as announced in the referenced advisory. VID 65d16342-3ec8-11e0-9df7-001c42d23634 OpenVAS Vulnerability Test $ Description: Auto generated from VID 65d16342-3ec8-11e0-9df7-001c42d23634 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Fedora 12 : opendchub-0.8.2-2.fc12 (2010-6415)

Fix for stack overflow bug. CVE ID: CVE-2010-1147 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 13 : opendchub-0.8.2-2.fc13 (2010-6478)

Fix for stack overflow bug. CVE ID: CVE-2010-1147 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for opendchub FEDORA-2010-6426

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-1147

Open DC Hub (OpenDCHub) 0.8.1 is affected by a stack-based buffer overflow in the handling of a user’s MyINFO message, which remote authenticated users can exploit to execute arbitrary code. The issue is documented as CVE-2010-1147. Mitigation in public advisories/reports recommends upgrading to ...

VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0005 Synopsis: VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues Issue date:...

VMware宿主产品VMSA-2009-0005多个远程漏洞

BUGTRAQ ID: 34373 CVE ID：CVE-2008-4916 CVE-2008-3761 CVE-2009-1146 CVE-2009-1147 CVE-2009-0910 CVE-2009-0909 CVE-2009-0908 CVE-2009-0177 CVE-2009-0518 CNCVE ID：CNCVE-20084916 CNCVE-20083761 CNCVE-20091146 CNCVE-20091147 CNCVE-20090910 CNCVE-20090909 CNCVE-20090908 CNCVE-20090177 CNCVE-20090518...

CVE-2009-1147

CVE-2009-1147 affects VMware VMCI (vmci.sys) and enables privilege escalation on Windows-based hosts/guests. The issue is described in VMware’s VMSA-2009-0005 advisory and is linked to VMCI IOCTL handling that can be abused by a local user with admin rights to gain SYSTEM privileges. A remediatio...

Fedora Core 10 FEDORA-2009-1147 (glpi)

The remote host is missing an update to glpi announced via advisory FEDORA-2009-1147. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Gentoo Security Advisory GLSA 200412-19 (phpmyadmin)

The remote host is missing updates announced in advisory GLSA 200412-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: phpMyAdmin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-1147

CVE-2008-1147 describes a weakness in a PRNG that uses XOR and 2-bit random hops (Algorithm X2) used in OpenBSD 2.6–3.4, macOS 10–10.5.1, FreeBSD 4.4–7.0, and DragonFlyBSD 1.0–1.10.1. The vulnerability allows remote attackers to infer sensitive values such as IP fragmentation IDs by observing a s...

Debian: Security Advisory (DSA-1147-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1147-1 (drupal)

The remote host is missing an update to drupal announced via advisory DSA 1147-1. Ayman Hourieh discovered that Drupal, a dynamic website platform, performs insufficient input sanitising in the user module, which might lead to cross-site scripting. OpenVAS Vulnerability Test $Id: deb11471.nasl 66...

CVE-2007-1147

CVE-2007-1147 describes a PHP remote file inclusion in view.php of hbm, exploitable via the hbmpath parameter to cause arbitrary PHP code execution. The NVD entry confirms a NETWORK-exposed, low-complexity vector with no authentication and partial confidentiality/ integrity/ availability impact (...

Debian DSA-1147-1 : drupal - missing input sanitising

Ayman Hourieh discovered that Drupal, a dynamic website platform, performs insufficient input sanitising in the user module, which might lead to cross-site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...