3467 matches found
RealVNC 3.3.7 Client Buffer Overflow
No description provided by source. $Id: realvncclient.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Microsoft Windows "April Fools 2001" Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/180/info Beginning April 1, 2001 and continuing through April 8, 2001, Windows applications will be offset by one hour - even though the system clock will show the proper time. This is due to the MSVCRT.DLL not correctly...
ntpd 4.0.99j-k readvar - Buffer Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Oracle 8i TNS Listener (ARGUMENTS) Buffer Overflow
No description provided by source. $Id: tnsarguments.rb 11122 2010-11-24 06:10:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Microsoft IIS 5.0 IDQ Path Overflow
No description provided by source. $Id: ms01033idq.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft IIS 5.0 Printer Host Header Overflow
No description provided by source. $Id: ms01023printer.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Solaris <= 8.0 - LPD Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CVE-2014-2001
The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate...
CVE-2014-2001
The CVE-2014-2001 entry concerns the JR East Japan Android app (prior to version 1.2.0). The underlying issue is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to obtain sensitive information via a crafted certificate. Impact is information disclosure of...
openSUSE Security Update : libXxf86vm (openSUSE-SU-2013:1041-1)
This update of libXxf86vm fixes a memory corruption issue. - U0001-memory-corruption-in-XF86VidModeGetGammaRamp-CVE- 201.patch - memory corruption in XF86VidModeGetGammaRamp CVE-2013-2001 bnc821663, bnc815451 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
CVE-2001-1593
The tempnameensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spyuser function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file...
CVE-2001-1593
Jakub Wilk found that a2ps, a tool to convert text and other types of files to PostScript, insecurely used a temporary file in spyuser. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running a2ps...
CVE-2001-1593
CVE-2001-1593 affects the a2ps package (versions 4.14 and earlier). The vulnerability is in the tempname_ensure function (lib/routines.h), used by the spy_user function, allowing local users to modify arbitrary files via a symlink attack on a temporary file. Impact is local file modification with...
Debian DSA-2892-1 : a2ps - security update
Several vulnerabilities have been found in a2ps, an 'Anything to PostScript' converter and pretty-printer. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2001-1593 The spyuser function which is called when a2ps is invoked with the --debug flag insecurel...
DSA-2892-1 a2ps - security update
Bulletin has no description...
Debian Security Advisory DSA 2892-1 (a2ps - security update)
Several vulnerabilities have been found in a2ps, an Anything to PostScript converter and pretty-printer. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2001-1593 The spyuser function which is called when a2ps is invoked with the --debug flag insecurely use...
PHP Ads new helperfunction.php Include Code Execution - Ver2 (CVE-2001-1054)
A code execution inclusion vulnerability has been reported in Phpadsnew. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apple Safari out-of-bounds access Denial of Service - Ver2 (CVE-2008-2001)
A denial-of-service vulnerability has been reported in Apple Safari. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Barracuda Networks Backup - Persistent Web Vulnerability
Document Title: =============== Barracuda Networks Backup - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=784 BARRACUDA NETWORK SECURITY ID: BNSEC-885 Release Date: ============= 2014-02-25 Vulnerability Laboratory ID VL-ID...
System V TTYPROMPT Buffer Overflow - Ver2 (CVE-2001-0797)
A buffer overflow vulnerability has been reported in various System V based operating systems. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...