125 matches found
CVE-2014-1355
CVE-2014-1355 affects Apple devices via a NULL pointer dereference in IOKit/IOReporting when handling API arguments. A local attacker could trigger a denial of service (reboot). Affected versions include iOS prior to 7.1.2, Apple TV prior to 6.1.2, and OS X prior to 10.9.4. Remediation is to appl...
AIX 5.2 TL 0 : muxatmd (IZ48495)
The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following file is vulnerable : /usr/sbin/muxatmd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The te...
AIX 5.3 TL 0 : muxatmd (IZ48496)
The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following file is vulnerable : /usr/sbin/muxatmd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The te...
AIX 6.1 TL 1 : muxatmd (IZ48561)
The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following file is vulnerable : /usr/sbin/muxatmd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The te...
Ubuntu: Security Advisory (USN-1355-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM WebSphere Application Server 'logoutExitPage'参数安全绕过漏洞
Bugtraq ID: 48710 CVE ID：CVE-2011-1355 IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 WebSphere Application Server对logoutExitPage参数缺少正确校验，允许远程攻击者绕过安全限制。攻击者可以利用此漏洞重定向应阻拦的域上面。 IBM Websphere Application Server 7.0 IBM Websphere Application Server 6.1 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...
CVE-2011-1355
CVE-2011-1355 affects IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19. The vulnerability is an open redirect via the logoutExitPage parameter, allowing remote attackers to redirect users to arbitrary sites and potentially enable phishing. Multiple connected sour...
Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004
The remote host is missing Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004. One or more of the following components are affected: Alias Manager CoreTypes c++filt Dock Launch Services Net-SNMP Ruby SMB File Server System Configuration Tomcat VPN WebKit OpenVAS Vulnerability Test Mac OS ...
CVE-2010-1355
Cross-site scripting XSS vulnerability on the TANDBERG Video Communication Server VCS before X5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Reference ID 66316...
CVE-2010-1355
The CVE-2010-1355 entry concerns a Cross-site Scripting (XSS) vulnerability in the TANDBERG Video Communication Server (VCS) prior to X5.0. The connected sources confirm the affected product and that the vulnerability is XSS with unspecified vectors, allowing remote attackers to inject arbitrary ...
RHEL 4 : Satellite Server (RHSA-2008:0630)
Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. During an internal security...
Zabbix Server : Multiple remote vulnerabilities
From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers, and other network hardware." Zabbix Server : Remote command execution Impacted software : Zabbix Server Zabbix reference :...
AIX 5.3 TL 6 : devices.common.IBM.atm.rte (U822017)
The remote host is missing AIX PTF U822017, which is related to the security of the package devices.common.IBM.atm.rte. The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid...
CVE-2009-1355
CVE-2009-1355 affects IBM AIX: the muxatmd command (/usr/sbin/muxatmd) contains a buffer overflow vulnerability that can be triggered by a long filename, leading to arbitrary code execution with root privileges via a local attack. The issue is reported across multiple AIX releases/TLs (e.g., 5.2–...
Fedora Update for tomcat5 FEDORA-2007-3474
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for tomcat5 FEDORA-2007-3456
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for tomcat5 FEDORA-2008-1467
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 8 : tomcat5-5.5.27-0jpp.2.fc8 (2008-8130)
Mon Sep 15 2008 David Walluck 0:5.5.27-0jpp.2 - add commons-io symlink - Mon Sep 15 2008 David Walluck 0:5.5.27-0jpp.1 - 5.5.27 Resolves: rhbz456120 Resolves: rhbz457934 Resolves: rhbz446393 Resolves: rhbz457597 - Tue Feb 12 2008 Devrim GUNDUZ 0:5.5.26-1jpp.2 - Rebuilt - Fri Feb 8 2008 Devrim...
Mac OS X 10.5.x < 10.5.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.4. Mac OS X 10.5.4 contains security fixes for multiple components. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid33281;...