Motorola Timbuktu PlughNTCommand named pipe string buffer overflow

Added: 07/13/2009 CVE: CVE-2009-1394 BID: 35496 OSVDB: 55436 Background Motorola Timbuktu is remote control software for Windows and Mac. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted character string to the...

Motorola Timbuktu PlughNTCommand named pipe string buffer overflow

Added: 07/13/2009 CVE: CVE-2009-1394 BID: 35496 OSVDB: 55436 Background Motorola Timbuktu is remote control software for Windows and Mac. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted character string to the...

CVE-2009-1394

CVE-2009-1394 : A stack-based buffer overflow exists in Motorola Timbuktu Pro via the PlughNTCommand named pipe, affecting Timbuktu Pro versions up to at least 8.6.6 (with plugins noting 8.6.7+ as the patch target). A remote attacker can exploit this to execute arbitrary code on Windows. Public r...

Wireshark chunked_encoding_dissector Function DOS

Wireshark crash when dissecting an HTTP chunked response. Versions affected: 0.99.5 Bug 1394 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wireshark chunkedencodingdissector Function DOS',...

CVE-2008-1394

Plone CMS before 3 places a base64 encoded form of the username and password in the ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network...

CVE-2008-1394

Plone CMS before v3 stores a base64-encoded form of the username and password in the __ac cookie for all user accounts, enabling credential exposure via network sniffing. Root cause: insecure cookie handling that reveals credentials. Impact: remote attackers could gain access by sniffing traffic....

Debian Security Advisory DSA 225-1 (tomcat4)

The remote host is missing an update to tomcat4 announced via advisory DSA 225-1. OpenVAS Vulnerability Test $Id: deb2251.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 225-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 047-1 (various kernel packages)

The remote host is missing an update to various kernel packages announced via advisory DSA 047-1. OpenVAS Vulnerability Test $Id: deb0471.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 047-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1394-1 (reprepro)

The remote host is missing an update to reprepro announced via advisory DSA 1394-1. OpenVAS Vulnerability Test $Id: deb13941.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1394-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1394-1 : reprepro - authentication bypass

It was discovered that reprepro, a tool to create a repository of Debian packages, only checks the validity of known signatures when updating from a remote site, and thus does not reject packages with only unknown signatures. This allows an attacker to bypass this authentication mechanism. The...

CVE-2003-1394

The CVE-2003-1394 entry concerns CoffeeCup Software Password Wizard 4.0. Affected component/file: the .apw file stored under the web document root. Root-cause: insufficient access control on the stored credentials, enabling remote attackers to obtain usernames and passwords via a direct request t...

CVE-2007-1394

The CVE-2007-1394 entry concerns Flat Chat 2.0. It describes a direct static code injection vulnerability in startsession.php, where the Chat Name field is inserted into online.txt and subsequently included by users.php. The root cause is unsafely incorporating user-provided input into executable...

FreeBSD-SA-06:25.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:25.kmem Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in firewire4 Category: core Module: sysdev Announced: 2006-12-06 Credits: Rodrigo...

FreeBSD -- Kernel memory disclosure in firewire(4)

Problem Description: In the FWGCROM ioctl, a signed integer comparison is used instead of an unsigned integer comparison when computing the length of a buffer to be copied from the kernel into the calling application. Impact: A user in the "operator" group can read the contents of kernel memory...

CVE-2006-1394

CVE-2006-1394 affects University of Washington Pubcookie through vulnerable IIS ISAPI filter versions 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a. Description: multiple XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact (pe...

CVE-2005-1394

CVE-2005-1394 describes a format-string vulnerability in ESRI ArcInfo Workstation 9.0 where local users can escalate privileges via format string specifiers in the ARCHOME environment variable, affecting components such as wservice and lockmgr . The connected PT-2005-2391 entry confirms product/v...

CVE-2004-1394

The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the execattr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges...

CVE-2004-1394

An advisory for CVE-2004-1394 describes a local privilege escalation in Sun Solaris 8 and 9. The pfexec function fails to properly handle an invalid entry in the exec_attr database within a custom rights profile, potentially allowing local users with such profiles to execute profile commands with...

CVE-2004-1394

The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the execattr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges...

Debian DSA-225-1 : tomcat4 - source disclosure

A security vulnerability has been confirmed to exist in Apache Tomcat 4.0.x releases, which allows to use a specially crafted URL to return the unprocessed source of a JSP page, or, under special circumstances, a static resource which would otherwise have been protected by a security constraint,...