Mandrake Security Advisory MDVSA-2009:097 (clamav)

The remote host is missing an update to clamav announced via advisory MDVSA-2009:097. OpenVAS Vulnerability Test $Id: mdksa2009097.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:097 clamav Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

openSUSE 10 Security Update : clamav (clamav-6201)

This clamav version upgrade to 0.95.1 fixes a buffer overflow error in the cliurlcanon function CVE-2009-1372 and a denial of service condition occuring while parsing malformed UPack archives CVE-2009-1371. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

ClamAV UPack拒绝服务和cli_url_canon()栈溢出漏洞

BUGTRAQ ID: 34446 CVECAN ID: CVE-2009-1371,CVE-2009-1372 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV的libclamav/phishcheck.c文件中的cliurlcanon函数存在栈溢出漏洞，远程攻击者可以通过提交恶意的URL来触发这个溢出，导致执行任意代码。 如果用户使用ClamAV扫描到了UPack编码的畸形文件的话，libclamav/others.h文件的CLIISCONTAINED宏中的安全漏洞可能导致应用程序崩溃。 ClamAV 0.95.1 ClamAV...

DEBIAN-CVE-2009-1371

The CLIISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service application crash via a malformed file with UPack encoding...

CVE-2009-1371

CVE-2009-1371 affects ClamAV before 0.95.1. The vulnerability arises from the CLI_ISCONTAINED macro in libclamav/others.h, allowing remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding. OpenVAS/Nessus entries corroborate related ClamAV issues ...

CVE-2009-1371

The CLIISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service application crash via a malformed file with UPack encoding...

Ubuntu 8.10 : clamav vulnerability (USN-756-1)

It was discovered that ClamAV did not properly verify buffers when processing Upack files. A remote attacker could send a crafted file and cause a denial of service via application crash. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

CVE-2008-1371

CVE-2008-1371 affects Drake CMS 0.4.11 RC8 via an absolute path traversal in install/index.php, exploitable through a full pathname supplied in the d_root parameter. This allows remote attackers to read and execute arbitrary files. The description notes provenance as third-party information; no r...

CVE-2008-1371

creationtimestamp| type| source ---|---|--- 2008-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31375...

Debian Security Advisory DSA 1371-1 (phpwiki)

The remote host is missing an update to phpwiki announced via advisory DSA 1371-1. OpenVAS Vulnerability Test $Id: deb13711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1371-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1371-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 232-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory DSA 232-1. OpenVAS Vulnerability Test $Id: deb2321.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 232-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[Reversemode Paper] Exploiting WDM Audio Drivers

Hi, For those researchers who are interested in the driver security and also for driver writers, the paper "Exploiting WDM Audio Drivers" has been released. This paper explains an attack vector inherent to certain WDM audio drivers running on Windows Vista, XP, 2000 and 2003. Successful...

Microsoft Windows Vista / XP / 2000 audio drivers privilege escalation

Ensoniq PCI 1371 WDM audio driver privilege escalation...

CVE-2003-1371

CVE-2003-1371 affects Nuked-Klan up to version 1.3b (and possibly earlier). A remote attacker can trigger phpinfo via the op parameter in the Team, News, or Liens modules, causing information disclosure about the server. The available documents do not specify a fixed patch or remediation. If need...

CVE-2007-1371

Multiple buffer overflows in Conquest 8.2a and earlier 1 allow local users to gain privileges by querying a metaserver that sends a long server entry processed by metaGetServerList and allow remote metaservers to execute arbitrary code via a long server entry processed by metaGetServerList; 2 all...

CVE-2007-1371

CVE-2007-1371 covers multiple buffer overflow flaws in Conquest 8.2a and earlier. The issues include local privilege escalation by querying a metaserver that returns a long server entry processed by metaGetServerList, a remote code execution possibility via a long server entry processed by metaGe...

Solaris 9 (sparc) : 118829-04

Sun Management Center 3.5.1: Solaris 9 Oracle Patch. Date this patch was last updated by Sun : Jun/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

CVE-2006-1371

CVE-2006-1371 affects XHP CMS

CVE-2005-1371

Summary: CVE-2005-1371 affects BulletProof FTP Server (BPFTPServer) 2.4.0.31, where the BPFTPServer service does not properly drop privileges before opening files via the Help menu, enabling local users to gain privileges. Affected software/component: BulletProof FTP Server, BPFTPServer service, ...