Symantec Norton Internet Security 2004 - ActiveX Control Buffer Overflow (Metasploit)

$Id: nis2004get.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2010-1689

The Red Hat and NVD entries confirm concrete details for CVE-2010-1689 and CVE-2010-1690: the DNS handling in smtpsvc.dll on Windows and Exchange product lines prior to specific builds uses predictable DNS transaction IDs (CVE-2010-1689) and does not verify that response IDs match queries (CVE-20...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Symantec...

CVE-2009-1689

The CVE-2009-1689 entry concerns a Cross-site scripting (XSS) vulnerability in WebKit used by Apple Safari up to version 4.0, affecting iOS 1.0–2.2.1 and iPod touch equivalents. The issue allows remote attackers to inject arbitrary script or HTML via vectors involving submitting a form to about:b...

Debian DSA-1689-1 : proftpd-dfsg - missing input validation

Maksymilian Arciemowicz of securityreason.com reported that ProFTPD is vulnerable to cross-site request forgery CSRF attacks and executes arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser. %NASLMINLEVEL 70300 C...

Gentoo Security Advisory GLSA 200507-11 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 200507-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200507-11 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 200507-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1689

CVE-2008-1689 is a stack consumption vulnerability affecting WebContainer.exe up to version 1.0.0.336 and SLMail Pro up to 6.3.1.0. A remote attacker can cause a denial of service (daemon crash) by sending a long request header in an HTTP request to TCP port 801. The provided documents identify t...

CVE-2007-1689

The CVE-2007-1689 entry concerns a stack buffer overflow in the ISAlertDataCOM ActiveX control (ISLALERT.DLL) shipped with Norton Personal Firewall 2004 and Norton Internet Security 2004. The vulnerability is triggered by long arguments to the Get() and Set() methods of the ISAlertDataCOM control...

Symantec Norton Internet Security 2004 ISAlertDataCOM ActiveX control stack buffer overflow

Overview The Symantec Norton Internet Security 2004 ISAlertDataCOM ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Symantec Norton Internet Security is a software package for Windows...

CentOS 4 : krb5 (CESA-2005:567)

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a networked authentication system that uses a trusted third party a KDC to...

CentOS 3 : krb5 (CESA-2005:562)

Updated krb5 packages which fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 Sep 2005 krb5-server packages have been added to this advisory for Red...

CVE-2006-1689

CVE-2006-1689 affects HP-UX B.11.11 in the su(1) utility when used with the LDAP netgroup feature. The underlying issue is a vulnerability that could allow a local user to gain unauthorized access. The connected Nessus entry references a cumulative patch (PHCO_34545) and related HP advisories (HP...

Solaris 10 (sparc) : 120469-07

SunOS 5.10: kerberos patch. Date this patch was last updated by Sun : Apr/10/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2005-1689

Double free vulnerability in the krb5recvauth function in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions...

CVE-2005-1689

Double free vulnerability in the krb5recvauth function in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions...

CVE-2005-1689

Double free vulnerability in the krb5recvauth function in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions...

[SECURITY] [DSA 757-1] New krb5 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA 757-1 [email protected] http://www.debian.org/security/ Michael Stone July 17, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2005-1689

CVE-2005-1689 is a double-free vulnerability in the MIT Kerberos 5 (krb5) implementation, specifically in the krb5_recvauth() routine. Connected advisories describe that a remote, unauthenticated attacker could trigger memory corruption, potentially causing a denial of service and, in some disclo...

DSA-757-1 krb5 - buffer overflow, double-free memory

Bulletin has no description...