Design/Logic Flaw

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to...

CVE-2013-6035

CVE-2013-6035 affects satellite terminals from Harris (BGAN RF-7800B-VU204, RF-7800B-DU204), Hughes (9201, 9450, 9502), Thuraya IP, Inmarsat, and Japan Radio JUE-250/JUE-500. The issue: firmware allows unauthenticated sessions on TCP port 1827 through an insecure proprietary protocol, enabling an...

CVE-2013-6035

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to...

Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt13

Nov. 24, 2013 Led 2.6.32-alt13 - 2.6.32-431.el6: + CVE-2013-0228 + CVE-2013-0268 + CVE-2013-0343 + CVE-2013-0349 + CVE-2013-0871 + CVE-2013-0913 + CVE-2013-1767 + CVE-2013-1773 + CVE-2013-1774 + CVE-2013-1792 + CVE-2013-1796 + CVE-2013-1797 + CVE-2013-1798 + CVE-2013-1826 + CVE-2013-1827 +...

Ubuntu 13.04 : linux vulnerability (USN-1827-1)

An flaw was discovered in the Linux kernel's perfevents interface. A local user could exploit this flaw to escalate privileges on the system. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to...

CVE-2013-1827

net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by leveraging the CAPNETADMIN capability for a certain 1 sender or 2 receiver getsockopt call...

CVE-2013-1827

CVE-2013-1827 affects the Linux kernel: net/dccp/ccid.h before 3.5.4. It allows local privilege escalation or denial of service (NULL pointer dereference and system crash) via CAP_NET_ADMIN on a getsockopt call (sender or receiver). The connected advisories/bulletins (Unity/Linux Nessus entries) ...

Ubuntu: Security Advisory (USN-1609-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1610-1: Linux kernel vulnerability

Pablo Neira Ayuso discovered a flaw in the credentials of netlink messages. An unprivileged local attacker could exploit this by getting a netlink based service, that relies on netlink credentials, to perform privileged actions. CVE-2012-3520 Mathias Krause discovered information leak in the Linu...

USN-1609-1: Linux kernel (OMAP4) vulnerability

A flaw was found in how the Linux kernel's KVM Kernel-based Virtual Machine subsystem handled MSI Message Signaled Interrupts. A local unprivileged user could exploit this flaw to cause a denial of service or potentially elevate privileges. CVE-2012-2137 Mathias Krause discover an error in Linux...

Ubuntu: Security Advisory (USN-1599-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1594-1: Linux kernel (Oneiric backport) vulnerabilities

Vadim Ponomarev discovered a flaw in the Linux kernel causing a reference leak when PID namespaces are used. A remote attacker could exploit this flaw causing a denial of service. CVE-2012-2127 A flaw was found in how the Linux kernel's KVM Kernel-based Virtual Machine subsystem handled MSI Messa...

CVE-2012-1827

AutoFORM PDM Archive vulnerability CVE-2012-1827 affects versions prior to 7.1. The webservice lacks authorization, allowing remote authenticated users to interact with the application database via SOAP (notably initializeQueryDatabase2), bypassing normal permissions. This can lead to unauthorize...

CVE-2011-1827

CVE-2011-1827 : Multiple vulnerabilities in Check Point components (SSL Network Extender/SNX, SecureWorkSpace, Endpoint Security On-Demand) allow remote code execution via a signed ActiveX control or Java applet. Exploitation, as described by SEC Consult, involves loading a malicious page or docu...

SEC Consult SA-20110810-0 :: Client-side remote file upload & command execution in Check Point SSL VPN On-Demand applications - CVE-2011-1827

SEC Consult Vulnerability Lab Security Advisory 20110810-0 ======================================================================= title: Client-side remote file upload & command execution product: Check Point SSL VPN On-Demand applications signed Java applet and ActiveX control SSL Network...

Debian DSA-1827-1 : ipplan - insufficient input sanitising

It was discovered that ipplan, a web-based IP address manager and tracker, does not sufficiently escape certain input parameters, which allows remote attackers to conduct cross-site scripting attacks. The oldstable distribution etch does not contain ipplan. %NASLMINLEVEL 70300 C Tenable Network...

Debian Security Advisory DSA 1827-1 (ipplan)

The remote host is missing an update to ipplan announced via advisory DSA 1827-1. OpenVAS Vulnerability Test $Id: deb18271.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1827-1 ipplan Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1827-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IPplan grp参数跨站脚本漏洞

BUGTRAQ ID: 35037 CVECAN ID: CVE-2009-1732 IPplan是用PHP编写的TCP IP地址管理软件和追踪工具。 IPplan的admin/usermanager模块没有正确地过滤用户所提交的grp参数，远程攻击者可以通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 IPplan 4.91a 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1827-1）以及相应补丁: DSA-1827-1：New ipplan packages fix cross-site scriptin...

Mozilla Firefox 'keygen' HTML Tag DOS Vulnerability (Windows)

The host is installed with Mozilla Firefox browser and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxkeygendosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox 'keygen' HTML Tag DOS Vulnerability Windows Authors: Antu Sanadi Copyright: Copyrig...