DSquare Exploit Pack: D2SEC_LAUNCHHELP

Name| d2seclaunchhelp ---|--- CVE| CVE-2011-2657 Exploit Pack| D2ExploitPack Description| Novell Zenworks Software Packaging LaunchHelp.dll ActiveX Control Remote Code Execution Vulnerability Notes|...

CVE-2011-2658

The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management ZCM 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows remote attackers to execute arbitrary code by leveraging unspecified mscomct2 flaws...

CVE-2011-2658

The CVE-2011-2658 vulnerability concerns the ISList.ISAvi ActiveX control used by AdminStudio within Novell ZENworks Configuration Management (ZCM) versions 10.2, 10.3, and 11 SP1. The issue stems from access to the mscomct2.ocx file, allowing remote code execution via unspecified flaws in mscomc...

CVE-2011-2657

CVE-2011-2657 affects the AdminStudio LaunchHelp.dll ActiveX control (LaunchHelp.HelpLauncher.1) used by Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1. The vulnerability arises in the LaunchProcess() function where a directory traversal string supplied as the first argumen...

CVE-2011-3174

The CVE-2011-3174 issue affects Novell ZENworks Configuration Management (AdminStudio) via the ISGrid2.dll/InstallShield ISGrid2 ActiveX control. A buffer overflow in DoFindReplace triggered by a long bstrReplaceText parameter allows remote code execution. Reported in versions 10.2, 10.3, and 11 ...

CVE-2011-2502

runtime/staprun/staprunfuncs.c in the systemtap runtime tool staprun in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search pat...

CVE-2011-2502

runtime/staprun/staprunfuncs.c in the systemtap runtime tool staprun in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search pat...

CVE-2011-2503

The insertmodule function in runtime/staprun/staprunfuncs.c in the systemtap runtime tool staprun in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module...

CVE-2011-4963

CVE-2011-4963 affects nginx on Windows: vulnerable in 1.3.x before 1.3.1 and 1.2.x before 1.2.1, where specially crafted requests can bypass access restrictions and reach restricted files using a trailing dot or certain "$index_allocation" sequences. Red Hat/OpenVAS/NVD entries corroborate the Wi...

CVE-2011-2502

runtime/staprun/staprunfuncs.c in the systemtap runtime tool staprun in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search pat...

CVE-2011-2503

CVE-2011-2503 affects SystemTap's runtime staprun on Linux, where the insert_module path allows a local user to escalate privileges due to a race between signature validation and module initialization in versions before 1.6. The vulnerability arises from improper module validation during loading,...

CVE-2011-2502

The CVE-2011-2502 issue affects SystemTap’s staprun component (runtime/staprun/staprun_funcs.c). The flaw arises when a user-specified module path for user-space probing (staprun -u) is not properly validated, enabling local stapusr group members to escalate privileges via a crafted module found ...

Vulnerabilities with Windows directory aliases

Vulnerabilities with Windows directory aliases Severity: medium CVE-2011-4963 Not vulnerable: 1.3.1+, 1.2.1+ Vulnerable: nginx/Windows 0.7.52-1.3.0...

[slackware-security] libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libpng-1.4.12-i486-1slack13.37.txz: Upgraded. Fixed incorrect...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 8.1 / 9.0 / 9.1 / current : libpng (SSA:2012-206-01)

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackwar...

BELL-CVE-2011-3148 CVE-2011-3148 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2011-3149 CVE-2011-3149 does not affect BellSoft software

Bulletin has no description...

CVE-2011-3148

CVE-2011-3148 affects Linux-PAM (pam_env) before 1.1.5. The stack-based buffer overflow occurs in the _assemble_line function when parsing a long string of spaces at the beginning of ~/.pam_environment, enabling local users to crash the PAM process and potentially execute arbitrary code. Connecte...

CVE-2011-3464

CVE-2011-3464 concerns libpng 1.5.4–1.5.7, where an off-by-one error in png_formatted_warning in pngerror.c can trigger a stack-based buffer overflow, allowing a remote attacker to cause an application crash and potentially execute arbitrary code. Fed/OSS advisories indicate a fix was applied in ...

CVE-2011-2199

CVE-2011-2199 affects tftp-hpa before 5.1. A buffer overflow in the utimeout option can allow a remote attacker to cause a denial of service and possibly execute arbitrary code. Exploitation information is not detailed in the provided documents beyond the affected component and impact. Remediatio...