Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - multiple flaws were found in the mmap and mremap implementations. A local user could use these flaws to cause a local denial of service or escalate their privileges. CVE-2010-0291, Important - a NULL pointer dereference flaw was found in the Fas...

CVE-2012-2970

The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service device hang via network traffic to port 1 1641, 2 3734, or 3 3735...

Shadow Stream Recorder 3.0.1.7 Buffer Overflow

This module exploits a buffer overflow in Shadow Stream Recorder 3.0.1.7. Using the application to open a specially crafted asx file, a buffer overflow may occur to allow arbitrary code execution under the context of the user. This module requires Metasploit: https://metasploit.com/download Curre...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 2682 / 2687 / 2689)

The SUSE Linux Enterprise 11 kernel was updated to 2.6.27.48, fixing various bugs and security issues : - The dogfs2setflags function in fs/gfs2/file.c of the Linux kernel does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl...

Ubuntu Update for Linux kernel vulnerabilities USN-966-1

Ubuntu Update for Linux kernel vulnerabilities USN-966-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9661.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-966-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

openSUSE Security Update : kernel (openSUSE-SU-2010:0397-1)

The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.48 fixing various bugs and security issues. CVE-2010-1641: The dogfs2setflags function in fs/gfs2/file.c in the Linux kernel does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a...

CVE-2010-1641

CVE-2010-1641 affects the Linux kernel’s gfs2 file operations. MiracleLinux AXSA-2010-377:12 notes the affected kernel (2.6.18-194.3.AXS3) and flags that do_gfs2_set_flags does not verify file ownership, allowing local bypass via a SETFLAGS ioctl. The vulnerability corresponds to Linux kernels be...

Mini-Stream Multiple Products Stack Overflow Vulnerability

Mini-Stream products is prone to a stack overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1641

CVE-2009-1641 refers to multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1. The vulnerability allows a remote attacker to execute arbitrary code by supplying a long RTSP URL in a .ram file or a long string in the HREF attribute of a REF element in a .asx file. The impact is consi...

CVE-2009-1641

creationtimestamp| type| source ---|---|--- 2009-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8631 2009-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8632 2018-05-29 15:50:33+00:00| seen|...

Fedora Core 9 FEDORA-2009-1641 (moodle)

The remote host is missing an update to moodle announced via advisory FEDORA-2009-1641. OpenVAS Vulnerability Test $Id: fcore20091641.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1641 moodle Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 9 FEDORA-2009-1641 (moodle)

The remote host is missing an update to moodle announced via advisory FEDORA-2009-1641. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2008-1641

CVE-2008-1641 is a SQL injection vulnerability in EfesTECH Video 5.0, exploitable via the catID parameter in default.asp. The affected component is the default.asp page of EfesTECH Video 5.0; the underlying cause is injectable SQL through catID, enabling remote command execution. NVD lists a base...

CVE-2008-1641

creationtimestamp| type| source ---|---|--- 2008-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31582...

CVE-2007-1641

CVE-2007-1641 describes a SQL injection vulnerability in PortailPHP 2.0, exposed through the idnews parameter in index.php. The vulnerability allows remote attackers to potentially execute arbitrary SQL commands, as indicated by the NVD entry. The connected documents corroborate the affected comp...

CVE-2006-1641

CVE-2006-1641 affects CzarNews 1.14. The vulnerability stems from improper sanitization of inputs in SQL queries, enabling multiple SQL injections through: (1) usern or (2) passw to cn_auth.php, (3) s to news.php, and (4) a parameter to dpost.php. Impact, as stated in connected sources, includes ...

CVE-2005-1641

Summary: The Ignition Project ignitionServer vulnerable component is the IRC service’s module mod_channel . Affected version range: ignitionServer 0.3.0 to 0.3.6 (and possibly earlier). Root cause: bug in how protected channels locked by a key are enforced and a broader design/validation issue in...

CVE-2002-1641

Oracle Web Cache in Oracle 9i Application Server (9iAS) has multiple buffer overflows that allow remote attackers to execute arbitrary code via unknown vectors. The connected records confirm the affected product and the root cause (buffer overflows) with remote code execution as impact, but do no...

CVE-2004-1641

Titan FTP Server versions up to 3.21 are affected by a heap-based buffer overflow triggered by long FTP commands (CWD, STAT, LIST). This remote overflow can cause a denial of service and, per some sources, may allow arbitrary code execution. Remediation mentioned in the sources is to upgrade to T...

CVE-2004-1641

Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service crash via a long FTP command such as 1 CWD, 2 STAT, or 3 LIST...