Zabbix Server Arbitrary Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Zabbix Server Arbitrary Command...

Zabbix Server - Arbitrary Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Zabbix Server Arbitrary Command...

Fedora 17 : transfig-3.2.5d-7.fc17 (2012-11718)

fix buffer overflow on loading a malformed .fig file CVE-2009-4227 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2009-5130

CVE-2009-5130 affects Websense Email Security’s Rules Service prior to 7.1. The issue is caused by processing an attachment with a crafted size, allowing remote attackers to trigger a denial-of-service (service crash). The connected documents do not provide exploitation details or a confirmed rem...

CVE-2009-5128

The Websense CVE-2009-5128 affects the Websense V10000 appliance prior to version 1.0.1, where a large input file not properly handled during buffering allows remote attackers to cause memory consumption and a process crash (DoS). The vulnerability is documented across multiple sources (NVD, Red ...

CVE-2009-5132

CVE-2009-5132 affects Websense Filtering Service in Web Security and Web Filter prior to 6.3.1 Hotfix 106 and prior to 7.1 (7.x). The flaw allows remote attackers to cause a denial-of-service (filtering outage) by sending a crafted URL. Impact is partial availability disruption as described; expl...

CVE-2009-5131

CVE-2009-5131 concerns the Receive Service in Websense Email Security prior to 7.1, where the blacklist fails to recognize domain extensions. This allows remote attackers to bypass access restrictions and send e-mail messages via an SMTP session. Documented by NVD and Red Hat with the same descri...

CVE-2009-5129

CVE-2009-5129 affects the Websense V10000 appliance prior to version 1.0.1. The issue allows a remote attacker to cause a denial of service (intermittent LDAP authentication outage) by sending a login attempt with an incorrect password. A fix is available in version 1.0.1 (per the V10000 release ...

CVE-2009-5124

The CVE-2009-5124 issue affects Comodo Internet Security (Antivirus component) prior to version 3.11.108364.552. The vulnerability allows remote attackers to cause a denial of service (application crash) by delivering a crafted packed file. The open documents corroborate a network-accessible DoS ...

CVE-2009-5126

CVE-2009-5126 affects the Antivirus component of Comodo Internet Security prior to version 3.8.65951.477. It allows remote attackers to cause a denial of service (application crash) by processing a crafted file. The NVD notes a CVSS v2 base score of 4.3 (MEDIUM) with network attack vector and par...

CVE-2009-5123

The CVE-2009-5123 issue affects Comodo Internet Security: the Antivirus component prior to version 3.11.108364.552 is vulnerable to a denial-of-service caused by processing a crafted compressed file, leading to memory consumption. The vulnerability is documented across multiple sources (NVD, Red ...

CVE-2009-5125

CVE-2009-5125 affects Comodo Internet Security prior to 3.9.95478.509. The vulnerability allows remote attackers to bypass malware detection by manipulating the RAR archive file format, enabling evasion of scanning. The underlying root cause is described as an unspecified manipulation of the arch...

CVE-2009-5127

CVE-2009-5127 affects the Antivirus component of Comodo Internet Security, prior to 3.8.64739.471. The vulnerability allows remote attackers to cause a denial of service (application crash) by processing a crafted file. The provided sources confirm the affected software/component and the impact; ...

Fedora Update for xfig FEDORA-2012-11813

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-5122

The CVE-2009-5122 entry affects the Personal Email Manager component of Websense Email Security prior to version 7.2. The vulnerability enables remote attackers to disclose potentially sensitive information from the JBoss status page through an unspecified query. No explicit exploitation details,...

CVE-2009-5120

Summary: CVE-2009-5120 concerns Websense Web Security 7.0 / Web Filter 7.0 using Apache Tomcat. The default Tomcat configuration in Websense Manager allows TCP connections to port 1812 from arbitrary source IPs, which is described as enabling cross-site scripting (XSS) via UTF-7 text to the 404 e...

CVE-2009-5119

CVE-2009-5119 involves the default configuration of Apache Tomcat in Websense Web Security 7.0 and Websense Web Filter 7.0. The issue is that weak SSL ciphers are enabled in conf/server.xml, potentially allowing remote attackers to obtain sensitive information by sniffing network traffic and then...

CVE-2009-5121

Websense Email Security 7.1 prior to Hotfix 4 is vulnerable to bypassing the sender-based blacklist via the 8BITMIME EHLO keyword in the SMTP session. The root cause is the SMTP handling that permits 8BITMIME EHLO, enabling remote attackers to circumvent blacklist checks. The public description c...

Fedora 17 : xfig-3.2.5-32.b.fc17 (2012-11801)

Fix a stack overflow when importing 1.3 files CVE-2009-4227 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 16 : xfig-3.2.5-32.b.fc16 (2012-11813)

Fix a stack overflow when importing 1.3 files CVE-2009-4227 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...