Sim Editor 6.6 - Local Stack Buffer Overflow

Sim Editor 6.6 - Local Stack Buffer Overflow include include include define SIZE 65536 / Title: Sim Editor v6.6 Stack Based Buffer Overflow Version: 6.6 Tested on: Windows XP sp2 en, Windows 8 64-bit Date: 16-01-2015 Author: Osanda Malith Jayathissa E-Mail: osandacatunseen.is Website:...

SOL15635 - PHP 5.x vulnerability - CVE-2012-1171

Recommended action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. Supplemental...

Important: Red Hat Security Advisory: Fuse ESB Enterprise/Fuse MQ Enterprise 7.1.0 update

This advisory contains instructions on how to resolve one security issue in the Elasticsearch component in Fuse ESB Enterprise and Fuse MQ Enterprise 7.1.0. Red Hat Product Security has rated this security issue as having Important security impact. A Common Vulnerability Scoring System CVSS base...

CVE-2012-1171

CVE-2012-1171 affects PHP 5.x via the libxml RSHUTDOWN function, enabling a remote attacker to bypass open_basedir protections and read arbitrary files when a custom stream wrapper is in use. The issue is triggered by a stream_close call during wrapper usage, which bypasses the intended directory...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2016)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2016 advisory. - kernel: Fix unlimited socket backlog DoS CVE-2010-4251 - rds: prevent BUGON triggering on congestion map updates CVE-2011-1023 - epoll: prevent...

CVE-2013-1171

Cisco CG-NMS contains multiple XSS vulnerabilities in the element-list component that could allow an unauthenticated, remote attacker to inject arbitrary web script or HTML via unspecified vectors. The issue is documented under Cisco Security Advisory Cisco-SA-20130401-CVE-2013-1171 and reference...

SuSE Update for kernel openSUSE-SU-2012:0236-1 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201202361.nasl 8295 2018-01-05 06:29:18Z teissa $ SuSE Update for kernel openSUSE-SU-2012:0236-1 kernel Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A flaw in the dccprcvstateprocess function could allow a remote attacker to cause a denial of service, even when the socket was already closed. CVE-2011-1093,...

GSM SIM Editor 5.15 Buffer Overflow

This module exploits a stack-based buffer overflow in GSM SIM Editor 5.15. When opening a specially crafted .sms file in GSM SIM Editor a stack-based buffer overflow occurs which allows an attacker to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...

kernel: security and bugfix update. (important)

The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7918)

This Linux kernel update fixes various security issues and bugs in the SUSE Linux Enterprise 10 SP4 kernel. This update fixes the following security issues : - X.25 remote DoS. CVE-2010-3873. bnc651219 - X.25 remote Dos. CVE-2010-4164. bnc653260 - 1 socket local DoS. CVE-2010-4249. bnc655696 -...

Linux Kernel Netfilter和Econet实现本地信息泄露漏洞

BUGTRAQ ID: 46919 CVE ID: CVE-2011-1170,CVE-2011-1171,CVE-2011-1172 Linux Kernel是Linux操作系统的内核。 Linux Kernel在Netfilter和Econet的实现上存在信息泄露漏洞，本地攻击者可利用此漏洞获取敏感信息。 struct aunhdr在x8664的'pad'和'handle'字段之间存在4个填充字节，在发送ah到网络之前，这些字节在变量ah中没有初始化，这可导致4字节内核栈信息泄露。 Linux kernel 2.6.x 厂商补丁： Linux -----...

CVE-2011-1171

CVE-2011-1171 affects the Linux kernel prior to 2.6.39, specifically the IPv4 netfilter ip_tables.c path. The issue is that string data in certain structure members may not end with the expected null terminator, enabling a local attacker with CAP_NET_ADMIN to craft a request and read the argument...

CVE-2011-1171

net/ipv4/netfilter/iptables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by...

[SECURITY] [DSA 2240-1] linux-2.6 security update

---------------------------------------------------------------------- Debian Security Advisory DSA-2240-1 [email protected] http://www.debian.org/security/ dann frazier May 24, 2011 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-2240-1 linux-2.6 - several issues

Bulletin has no description...

CVE-2010-1171

CVE-2010-1171 affects Red Hat Network Satellite (RHN Satellite) 5.3 and 5.4. The vulnerability stems from an obsolete XML-RPC API exposed by RHN Satellite, enabling an authenticated user to access arbitrary files and trigger a denial of service via manipulation of configuration and package group ...

Fedora Core 10 FEDORA-2009-13040 (moodle)

The remote host is missing an update to moodle announced via advisory FEDORA-2009-13040. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

openSUSE Security Update : moodle (moodle-803)

Special command sequences in TeX files allowed users to read arbitrary files CVE-2009-1171. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-803. The text description of this plugin is C...

openSUSE Security Update : moodle (moodle-803)

Special command sequences in TeX files allowed users to read arbitrary files CVE-2009-1171. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-803. The text description of this plugin is C...