Cacti < 0.8.7f Multiple Input Validation Vulnerabilities

According to its self-reported version number, the Cacti application running on the remote web server is prior to version 0.8.7f. It is, therefore, potentially affected by the following vulnerabilities : - A vulnerability exists in 'templatesexport.php' due to improper validation of input to the...

openSUSE Security Update : cacti (openSUSE-SU-2010:0181-1)

Missing input sanitation in the template export feature allowed for SQL injection attacks CVE-2010-1431. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cacti-2365. The text description of thi...

CVE-2010-1431

creationtimestamp| type| source ---|---|--- 2010-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12338...

Mandriva Update for kvm MDVA-2010:092 (kvm)

Check for the Version of kvm OpenVAS Vulnerability Test Mandriva Update for kvm MDVA-2010:092 kvm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

SLES9: Security update for gnutls

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gnutls-devel gnutls For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013425...

CentOS Security Advisory CESA-2009:1431 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:1431. CESA-2009:1431 64904 2 $Id: ovcesa20091431.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1431 seamonkey Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Symantec Alert Management System File Transfer Service Remote Code Execution (CVE-2009-1431)

Symantec System Center provides centralized systems and policy management for Norton Antivirus Enterprise Solution across multiple Windows NT and NetWare networks. The vulnerability is due to a design error in the Intel File Transfer service XFR.EXE, a service used to aid communication between th...

Symantec Alert Management System Intel File Transfer service command execution

Added: 05/06/2009 CVE: CVE-2009-1431 BID: 34675 OSVDB: 54160 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. The Intel File Transfer service is a component of AMS2 which is used to aid communication between the core server and managed clients. It...

Symantec Alert Management System Intel File Transfer service command execution

Added: 05/06/2009 CVE: CVE-2009-1431 BID: 34675 OSVDB: 54160 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. The Intel File Transfer service is a component of AMS2 which is used to aid communication between the core server and managed clients. It...

iDefense Security Advisory 04.29.09: Symantec System Center Alert Management System Console Arbitrary Program Execution Design Error Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 04.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 28, 2009 I. BACKGROUND Symantec System Center is an MMC Microsoft Management Console snap-in that allows an administrator to remotely manage Symantec...

CVE-2009-1431

Symantec Alert Management System (AMS2) Intel File Transfer service (XFR.EXE) is affected. A design flaw allows remote code execution by an unauthenticated attacker who places code on a share or WebDAV server and then sends the UNC path to the XFR.EXE service. Impact can affect Symantec System Ce...

CVE-2009-1431

XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 AMS2, as used in Symantec System Center SSS; Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus SAV Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10....

Gentoo Security Advisory GLSA 200505-04 (GnuTLS)

The remote host is missing updates announced in advisory GLSA 200505-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1431

CVE-2008-1431 affects RaidSonic NAS-4220-B with firmware 2.6.0-n (2007-10-11). The vulnerability stems from storing the partition encryption key in an unencrypted /system/.crypt file, encoded with base64, enabling local users to obtain the key. Impact is limited to local access exposure of the en...

Debian: Security Advisory (DSA-1431-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1431-1 : ruby-gnome2 - format string

It was discovered that ruby-gnome2, the GNOME-related bindings for the Ruby language, didn't properly sanitize input prior to constructing dialogs. This could allow the execution of arbitrary code if untrusted input is displayed within a dialog. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2003-1431

CVE-2003-1431 affects the Epic Games Unreal Engine versions 226f through 436. The vulnerability is a buffer overflow triggered by a long host string in the Unreal URL, enabling remote attackers to cause a denial of service (crash). The provided documents describe the affected software and the bas...

rPSA-2007-0115-1 libexif

rPath Security Advisory: 2007-0115-1 Published: 2007-06-04 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: libexif=/conary.rpath.com@rpl:devel//1/0.6.15-0.1-1 References: https://vulners.com/cve/CVE-2007-2645...

CVE-2007-1431

PennMUSH 1.8.3 before 1.8.3p1 and 1.8.2 before 1.8.2p3 have multiple unspecified vulnerabilities that enable a denial of service (crash) related to the speak and buy functions. Upgrading to 1.8.3p1 or 1.8.2p3 mitigates (per CVE-2007-1431). No exploitation details are provided in the sources.

CentOS 4 : gnutls (CESA-2005:430)

Updated GnuTLS packages that fix a remote denial of service vulnerability are available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library implements Secure Sockets Layer SSL v3 and Transport Laye...