74 matches found
CVE-2012-1995
CVE-2012-1995 concerns HP Systems Insight Manager (SIM) prior to version 7.0. The available documents describe an unspecified vulnerability enabling local users to obtain sensitive information or modify data via unknown vectors. The exact root cause, vulnerable components, affected configurations...
CVE-2012-1995
Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...
Scientific Linux Security Update : quagga on SL5.x, SL4.x, SL3.x i386/x86_64
An out of bounds memory read flaw was discovered in Quagga's bgpd. A configured peer of bgpd could cause Quagga to crash, leading to a denial of service CVE-2007-1995. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'...
Quagga < 0.98.7 / 0.99.7 BGPD Denial of Service Vulnerability
According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by a denial of service vulnerability. The issue can be triggered by a specially crafted UPDATE message from an explicitly configured BGP peer. C Tenable Network Security...
CVE-2011-1995
Microsoft Internet Explorer versions 6–9 are affected by CVE-2011-1995 due to a memory handling flaw in OLEAuto32.dll, allowing remote code execution when an uninitialized object is accessed. The exploitation vector is a remote-triggered memory corruption via a specially crafted webpage. Patching...
Microsoft IE OLEAuto32.dll内存破坏漏洞(MS11-081)
BUGTRAQ ID: 49960 CVE ID: CVE-2011-1995 Microsoft Internet Explorer简称MSIE,是微软公司推出的一款网页浏览器。 IE在OLEAuto32.dll相关的实现上存在内存破坏漏洞,当IE访问错误初始化对象时,远程攻击者可利用此漏洞远程代码或导致拒绝服务。 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 临时解决方法:...
Microsoft Internet Explorer Multiple Vulnerabilities (2586448)
This host is missing a critical security update according to Microsoft Bulletin MS11-081. OpenVAS Vulnerability Test $Id: secpodms11-081.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2586448 Authors: Veerendra G.G Copyright: Copyright c 2011 SecPod...
Microsoft Internet Explorer 'OLEAuto32.dll' CVE-2011-1995 Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aur...
Debian DSA-1995-1 : openoffice.org - several vulnerabilities
Several vulnerabilities have been discovered in the OpenOffice.org office suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0136 It was discovered that macro security settings were insufficiently enforced for VBA macros. - CVE-2009-0217 It was...
CVE-2009-1995
CVE-2009-1995 is an Oracle Database vulnerability affecting the Advanced Queuing component (SYS.DBMS_AQ_INV) in Oracle Database 10.2.0.4 and 11.1.0.7. The issue allows remote authenticated users to impact confidentiality and integrity. The connected documents indicate this CVE was addressed in th...
SLES9: Security update for quagga
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: quagga For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014412 within the SuSE...
Ubuntu Update for quagga vulnerability USN-461-1
Ubuntu Update for Linux kernel vulnerabilities USN-461-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4611.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for quagga vulnerability USN-461-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Fedora Update for quagga FEDORA-2007-2196
Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2007-2196 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for quagga FEDORA-2007-525
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RoarSmithinfo2www远程执行任意命令漏洞
BugCVE: CVE-1999-0266 BUGTRAQ: 1995 “info2www”是一个将GNU Info文本转化成HTML文件的CGI程序。 某些早期版本的info2www脚本实现上存在输入验证漏洞,远程攻击者可以利用此漏洞以Web进程的权限在主机上 执行任意系统命令。 问题在于程序脚本没有过滤用户输入中包含的一些shell元字符,远程攻击者可能以Web守护程序的权限(root或nobody)在主机上执行任意程序。 1.0-1.1 临时解决方法: 如果您不能立刻安装补丁或者升级,NSFOCUS建议您采取以下措施以降低威胁:...
rpc.ypupdated RCE Vulnerability
ypupdated with the SPDX-FileCopyrightText: 2008 Tenable Network Security, Inc. and Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200705-05 (quagga)
The remote host is missing updates announced in advisory GLSA 200705-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Sun Java System Directory Server bind-dn Remote Privilege Escalation
The version of Sun Java System Directory Proxy Server running on the remote host is affected by an unauthorized access vulnerability. Specifically, the server fails to properly classify connections in relation to 'binddn' parameter. Successful exploitation of this issue might allow an unprivilege...
Multiple Vendor NIS rpc.ypupdated YP Map Update Arbitrary Remote Command Execution
ypupdated is part of NIS and allows a client to update NIS maps. This old command execution vulnerability was discovered and fixed in 1995. However, it is still possible to run ypupdated in insecure mode by adding the '-i' option. Anybody can easily run commands as root on this machine by...
SuSE 10 Security Update : quagga (ZYPP Patch Number 3230)
Remote attackers could crash quagga via specially crafted 'UPDATE' messages. CVE-2007-1995 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29567;...