85 matches found
DLA-60-1 icinga - security update
Bulletin has no description...
Web Servers W-Agora Remote File Inclusion (CVE-2002-1878)
A Remote File Inclusion vulnerability has been reported in W-Agora. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was previously...
[SECURITY] [DSA 2956-1] icinga security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...
openSUSE Security Update : nagios (openSUSE-SU-2014:0516-1)
Nagios was updated to fix a stack-based buffer overflow in the cmdsubmitf function in the CGI handler. CVE-2014-1878 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-291. The text...
[SECURITY] [DSA 2956-1] icinga security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...
SuSE 11.3 Security Update : nagios (SAT Patch Number 9071)
The monitoring service Nagios has been updated to fix potential buffer overflows in its CGI scripts. CVE-2014-1878 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrig...
Updated nagios packages fix CVE-2014-1878
Updated nagios packages fix security vulnerability: Stack-based buffer overflow in the cmdsubmitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service segmentatio...
CVE-2014-1878
Stack-based buffer overflow in the cmdsubmitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service segmentation fault via a long message to cmd.cgi...
CVE-2014-1878
The CVE-2014-1878 entry concerns a stack-based buffer overflow in the cmd_submitf function of cgi/cmd.c used by Nagios Core (affected up to 4.0.3rc1) and Icinga (before 1.8.6, 1.9 before 1.9.5, 1.10 before 1.10.3). The root cause is improper bounds checking when handling a long message sent to cm...
Ubuntu: Security Advisory (USN-1878-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft IE OnBeforeDeactivate事件远程代码执行漏洞 (MS12-037)
CVE ID: CVE-2012-1878 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 IE访问已经删除的对象时存在远程代码执行漏洞，攻击者可利用当前用户权限执行任意代码以破坏内存。 0 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 临时解决方法： 如果您不能立刻安装补丁或者升级，SEBUG建议您采取以下措施以降低威胁：...
CVE-2012-1878
CVE-2012-1878 affects Microsoft Internet Explorer versions 6–9. The vulnerability stems from improper handling of memory objects, allowing remote code execution when an attacker accesses a deleted object (OnBeforeDeactivate event). The issue is severe: base CVSS 9.3 (NETWORK, HIGH) with complete ...
Microsoft Internet Explorer CVE-2012-1878 'OnBeforeDeactivate' Event Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Internet...
Internet Explorer OnBeforeDeactivate Event Remote Code Execution (MS12-037; CVE-2012-1878)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer...
CVE-2011-1878
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...
CVE-2011-1878
CVE-2011-1878 is a use-after-free vulnerability in win32k.sys, the kernel-mode driver component of Windows. A crafted local access application can trigger improper driver object management, enabling a local user to escalate privileges. Affected products include Windows XP SP2/SP3, Windows Server ...
SuSE 10 Security Update : xine (ZYPP Patch Number 5304)
Specially crafted NSF files could potentially be exploited to execute arbitrary code. CVE-2008-1878 Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security,...
CVE-2010-1878
Directory traversal vulnerability in the OrgChart comorgchart component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...
CVE-2010-1878
Joomla! component OrgChart (com_orgchart) 1.0.0 is affected by a Local File Inclusion (directory traversal) vulnerability. The flaw allows an attacker to read arbitrary files by supplying a .. in the controller parameter to index.php, enabling unauthorized file access. Connected data confirms the...