Adobe Flash Media Server未明RPC调用特权提升漏洞

Bugraq ID: 34790 CVE ID：CVE-2009-1365 CNCVE ID：CNCVE-20091365 Adobe Flash Media Server是一款流视频和实时通信领域的解决方案，可提供网上视频直播服务。 Adobe Flash Media Server存在一个未明安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Adobe Flash Media Streaming Server 3.5.1 Adobe Flash Media Server 3.5.1 Adobe Flash Media Server 3.0.3...

CVE-2009-1365

Adobe Flash Media Server (FMS) is affected by an RPC-based vulnerability that allows remote execution of server-side ActionScript procedures. The issue affects FMS before 3.0.4 and 3.5.x before 3.5.2 (used in Flash Media Interactive Server and Flash Media Streaming Server). The accompanying data ...

CVE-2008-1365

Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service crash via a long encrypted password, which triggers the overflow in 1...

CVE-2008-1365

Summary (CVE-2008-1365) : A stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition components allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP inputs. Affected are OfficeScan 8.0 Patch 2 build 1189 and earlier and 7.3 Patch 3 build 1...

Trend Micro OfficeScan Policy Server CGI buffer overflow

Added: 03/03/2008 CVE: CVE-2008-1365 BID: 28020 OSVDB: 42500 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow vulnerability in the Policy Server for Cisco NAC component allows remote attackers to execute arbitrary commands by...

Trend Micro OfficeScan Policy Server CGI buffer overflow

Added: 03/03/2008 CVE: CVE-2008-1365 BID: 28020 OSVDB: 42500 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow vulnerability in the Policy Server for Cisco NAC component allows remote attackers to execute arbitrary commands by...

Debian Security Advisory DSA 1365-2 (id3lib3.8.3)

The remote host is missing an update to id3lib3.8.3 announced via advisory DSA 1365-2. OpenVAS Vulnerability Test $Id: deb13652.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1365-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1365-2 (id3lib3.8.3)

The remote host is missing an update to id3lib3.8.3 announced via advisory DSA 1365-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2003-1365

The CVE-2003-1365 entry concerns the escape_dangerous_chars function in CGI::Lite 2.0 and earlier. The function fails to remove certain dangerous characters (backslash, ?, ~, ^, newline, and carriage return), allowing remote attackers to read or write arbitrary files or execute arbitrary commands...

Trend Micro OfficeScan Remote Stack Buffer Overflow

This module exploits a stack buffer overflow in Trend Micro OfficeScan cgiChkMasterPwd.exe running with SYSTEM privileges. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasm' class MetasploitModule 'Trend...

Debian DSA-1365-3 : id3lib3.8.3 - programming error

Nikolaus Schulz discovered that a programming error in id3lib, an ID3 Tag Library, may lead to denial of service through symlink attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ OpenBSD's IPv6 mbufs remote kernel buffer overflow Date Published: 2007-03-13 Last Update: 2007-03-13 Advisory ID: CORE-2007-0219 Bugtraq ID: None currently assigned...

CVE-2007-1365

OpenBSD CVE-2007-1365 is a remote kernel memory corruption vulnerability in the mbuf handling of IPv6 packets (kern/uipc_mbuf2.c) that can allow remote code execution or a crash when processing fragmented ICMPv6/IPv6 packets. The issue affected OpenBSD 3.9 and 4.0; CoreLabs/Core advisory CORE-200...

Solaris 9 (sparc) : 118829-04

Sun Management Center 3.5.1: Solaris 9 Oracle Patch. Date this patch was last updated by Sun : Jun/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

CVE-2006-1365

The Motorola PEBL U6, the Motorola V600, and possibly the Motorola E398 and other Motorola phones allow remote attackers to add an entry for their own Bluetooth device to a target device's list of trusted devices aka Device History, and possibly obtain AT level access to the target device, by...

CVE-2006-1365

The CVE-2006-1365 entry describes a Bluetooth attack (“HeloMoto”) against Motorola phones (PEBL U6, V600, possibly E398 and others) where an attacker can remotely trigger an OBEX Push Profile that pretends to send a vCard to add the attacker’s device to the target’s trusted device list (Device Hi...

[Full-disclosure] Pico Server (pServ) Remote Command Injection

Advisory: Pico Server pServ Remote Command Injection RedTeam found a remote command injection in Pico Server pServ which results in a remote attacker being able to issue arbitrary commands on the server. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, =3.2 probably too...

CVE-2004-1365

Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user...

Debian DSA-216-1 : fetchmail - buffer overflow

Stefan Esser of e-matters discovered a buffer overflow in fetchmail, an SSL enabled POP3, APOP and IMAP mail gatherer/forwarder. When fetchmail retrieves a mail all headers that contain addresses are searched for local addresses. If a hostname is missing, fetchmail appends it but doesn't reserve...