CVE-2012-1250

CVE-2012-1250 affects Logitec LAN-W300N/R routers with firmware older than 2.27. The vulnerability is a login-access control flaw that lets remote attackers obtain administrative privileges and modify settings via PPPoE-related vectors. Public sources indicate updating to the latest firmware (2.2...

Fedora 15 : drupal7-7.12-1.fc15 (2012-1250)

This package includes security updates from upstream 7.11 as well as additional bug fixes. Refer to upstream notes for more information : - http://drupal.org/node/1425092 - http://drupal.org/node/1425104 Note that Tenable Network Security has extracted the preceding description block directly fro...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : empathy vulnerabilities (USN-1250-1)

It was discovered that a cross-site scripting XSS vulnerability in the Adium theme allows remote attackers to inject arbitrary JavaScript or HTML via a crafted nickname in XMPP group conversations. Note that Tenable Network Security has extracted the preceding description block directly from the...

CVE-2011-1250

Microsoft Internet Explorer 6–9 is affected by a memory-corruption vulnerability in Link Property Processing, due to access of objects that are uninitialized or deleted. NSFOCUS describes the root cause as processing malformed Link objects leading to unauthorized memory access and potential code ...

Internet Explorer Link Properties Handling Memory Corruption (MS11-050; CVE-2011-1250)

A remote code execution vulnerability has been reported in the way that Microsoft IE accesses an object that has not been correctly initialized or has been deleted. Microsoft IE attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way tha...

Gentoo Security Advisory GLSA 201101-05 (OpenAFS)

The remote host is missing updates announced in advisory GLSA 201101-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201101-05 (OpenAFS)

The remote host is missing updates announced in advisory GLSA 201101-05. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

[ GLSA 201101-05 ] OpenAFS: Arbitrary code execution

Gentoo Linux Security Advisory GLSA 201101-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-201101-05 : OpenAFS: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201101-05 OpenAFS: Arbitrary code execution Two vulnerabilities were discovered: Simon Wilkinson discovered from a bug report by Toby Blake that the cache manager of OpenAFS contains a heap-based buffer overflow which is related t...

MS10-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2027452) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, these issues could be leveraged to execute arbitrary code subject to the user's privilege...

MS10-038: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452)

The remote host contains a version of Microsoft Office Excel 2002, Microsoft Office Excel 2003, Microsoft Office Excel 2007, Microsoft Office Excel Viewer, or Microsoft Office Compatibility Pack that is affected by several vulnerabilities. If an attacker can trick a user on the affected system in...

Ipswitch WhatsUp Web Interface SQL Injection (CVE-2005-1250)

WhatsUp Professional 2005 is a network monitoring and resource management solution. WhatsUp Professional uses a relational database to store the information about user accounts and network devices that are monitored by the application. The relational databases supported by WhatsUp Professional ar...

[SECURITY] [DSA 1768-1] New openafs packages potential code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1768-1 [email protected] http://www.debian.org/security/ Florian Weimer April 10, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1768-1] New openafs packages potential code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1768-1 [email protected] http://www.debian.org/security/ Florian Weimer April 10, 2009 http://www.debian.org/security/faq -...

CVE-2009-1250

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service system crash via an RX response with a large error-code value that is interpreted as a pointer and dereferenced,...

CVE-2009-1250

OpenAFS vulnerability CVE-2009-1250 affects the Linux client cache manager in OpenAFS versions 1.0–1.4.8 and 1.5.0–1.5.58 (also IBM AFS 3.6 before Patch 19). The issue arises when processing an RX response with a large error-code value that is interpreted as a pointer and dereferenced, potentiall...

CVE-2008-1250

The CVE-2008-1250 case concerns the web interface of the central phone server in the Snom 320 SIP Phone. It describes multiple CSRF vulnerabilities that allow remote attackers to perform actions as the phone user, demonstrated by inserting an address-book entry containing an XSS sequence. The ava...

CVE-2008-1250

Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence...

CVE-2007-1250

CVE-2007-1250 describes a SQL injection vulnerability in ANGEL Learning Management Suite (LMS) 7.1. The flaw affects the code path handling the id parameter in section/default.asp, enabling remote attackers to execute arbitrary SQL commands. The available documents do not specify affected version...

Debian DSA-1250-1 : cacti - missing input sanitising

It was discovered that cacti, a frontend to rrdtool, performs insufficient validation of data passed to the 'cmd' script, which allows SQL injection and the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...