99 matches found
Solaris 10 (x86) : 147441-27
SunOS 5.10x86: Solaris kernel patch. Date this patch was last updated by Sun : Nov/30/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/02/25. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
CVE-2011-1683
IBM WebSphere Application Server WAS 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors...
CVE-2011-1683
CVE-2011-1683 concerns IBM WebSphere Application Server on z/OS when using a Local OS user registry or Federated Repository with a RACF adapter. The vulnerability allows remote attackers to obtain unspecified application access via unknown vectors in WAS 6.0.x (up to 6.0.2.43), 6.1.x (before 6.1....
CVE-2007-1683
creationtimestamp| type| source ---|---|--- 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12605...
SuSE9 Security Update : xscreensaver (YOU Patch Number 12174)
Following security problem is fixed by this patch : - When getpwuid fails due to dropped network on NIS accounts fail instead of silently disabling locking and just blanking. CVE-2008-1683 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2009-1683
The CVE-2009-1683 issue affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1, where a remote attacker can trigger a denial of service (device reset) via a crafted ICMP echo request. The root cause is described as a logic issue in the Telephony component, leading to an assertio...
Debian DSA-1683-1 : streamripper - buffer overflow
Multiple buffer overflows involving HTTP header and playlist parsing have been discovered in streamripper CVE-2007-4337, CVE-2008-4829 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-168...
SuSE 10 Security Update : xscreensaver (ZYPP Patch Number 5334)
Following security problem is fixed by this patch : - When getpwuid fails due to dropped network on NIS accounts fail instead of silently disabling locking and just blanking. CVE-2008-1683 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
openSUSE 10 Security Update : xscreensaver (xscreensaver-5333)
Following security problem is fixed by this patch : CVE-2008-1683: When getpwuid fails due to dropped network on NIS accounts fail instead of silently disabling locking and just blanking. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
CVE-2008-1683
CVE-2008-1683 is a duplicate of CVE-2008-0887 and the candidate itself has been withdrawn; the connected records show the root issue is in gnome-screensaver’s password verification logic, which could allow a local attacker to crash the screen unlock process when remote authentication is involved....
DSquare Exploit Pack: D2SEC_INCREDIMAIL
Name| d2secincredimail ---|--- CVE| CVE-2007-1683 Exploit Pack| D2ExploitPack Description| IncrediMail IMMenuShellExt ActiveX Stack Overflow Notes|...
CVE-2007-1683
CVE-2007-1683 affects the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll). The DoWebMenuAction() function contains a stack-based buffer overflow that could allow a remote attacker to execute arbitrary code on vulnerable systems. CERT/CC describes the vulnerability as a remote, unauthenti...
CVE-2006-1683
The CVE-2006-1683 entry describes a SQL injection vulnerability in Chipmunk Guestbook’s admin/login.php that allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name. This vulnerability affects Chipmunk Guestbook’s login handling and is documente...
CVE-2002-1683
CVE-2002-1683 is an XSS vulnerability in BadBlue Personal Edition 1.7.3 where an attacker can remotely inject a script via the cleanSearchString() function, causing the script to run in other users’ contexts. The connected sources confirm the vulnerability details but do not provide exploitation ...
CVE-2005-1683
CVE-2005-1683 describes a buffer overflow in Microsoft Word components: winword.exe on Windows (versions up to 10.2627.6714 and earlier) and Word for Macintosh prior to SP3 for Word 2002, exploitable via a crafted .mcw file. This leads to remote denial of service and, possibly, arbitrary code exe...
CVE-2004-1683
CVE-2004-1683 concerns a race condition in crrtrap on QNX RTP 6.1. The vulnerability allows local users to gain privileges by manipulating the PATH environment variable to invoke a malicious io-graphics program before crrtrap executes. Impact is described as local privilege escalation with partia...
CVE-2004-1683
A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap...
CVE-2004-1683
A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap...