Oracle Linux 6 : gc (ELSA-2013-1500)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1500 advisory. - Related: CVE-2012-2673 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Medium: gc

Issue Overview: It was discovered that gc's implementation of the malloc and calloc routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc and calloc routines, a remote attacker...

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

CVE-2013-4349

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4540. Reason: This candidate was MERGED into CVE-2012-4540, since it was later discovered that it affected an additional version, but it does not constitute a regression error. Notes: All CVE users should reference...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4540. Reason: This candidate was MERGED into CVE-2012-4540, since it was later discovered that it affected an additional version, but it does not constitute a regression error. Notes: All CVE users should reference...

CVE-2013-4349

CVE-2013-4349 is a merged/misused candidate that was incorporated into CVE-2012-4540 and is not a standalone active entry. Public materials corroborate a heap-based buffer overflow in icedtea-web related to triggering an event attached to an applet, with fixes documented in icedtea-web updates (e...

Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution (Multithreaded Scanner) (2)

Apache + PHP 5.3.12 / 5.4.2 - Remote Code Execution Multithreaded Scanner 2. CVE-2012-1823,CVE-2012-2311,CVE-2012-2336. Remote exploit for PHP...

Apache PHP-CGI Remote Code Execution

The PHP installation on the remote web server contains a flaw that could allow a remote attacker to pass command-line arguments as part of a query string to the PHP-CGI program. This could be abused to execute arbitrary code, reveal PHP source code, cause a system crash, etc. %NASLMINLEVEL 70300 ...

Apache Magicka Remote Code Execution Vulnerability

Apache and PHP remote command execution exploit that leverages php5-cgi. / Apache Magica by Kingcope / / gcc apache-magika.c -o apache-magika -lssl / / This is a code execution bug in the combination of Apache and PHP. On Debian and Ubuntu the vulnerability is present in the default install of th...

Apache / PHP 5.x Remote Code Execution Exploit

No description provided by source. / Apache Magica by Kingcope / / gcc apache-magika.c -o apache-magika -lssl / / This is a code execution bug in the combination of Apache and PHP. On Debian and Ubuntu the vulnerability is present in the default install of the php5-cgi package. When the php5-cgi...

SoftMaker Office 2012 - TextMaker Memory Corruption

SoftMaker Office 2012 - TextMaker Memory Corruption / Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested :...

SoftMaker Office 2012 - TextMaker Memory Corruption

/ Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested : Win XP SP3 ENG & Win 7 sp 1 x64 Ultimate Descriptio...

CentOS Update for gnupg CESA-2013:1458 centos5

Check for the Version of gnupg OpenVAS Vulnerability Test CentOS Update for gnupg CESA-2013:1458 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for gnupg2 CESA-2013:1459 centos6

Check for the Version of gnupg2 OpenVAS Vulnerability Test CentOS Update for gnupg2 CESA-2013:1459 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CentOS Update for gnupg CESA-2013:1458 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1991-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution

/ Apache Magica by Kingcope / / gcc apache-magika.c -o apache-magika -lssl / / This is a code execution bug in the combination of Apache and PHP. On Debian and Ubuntu the vulnerability is present in the default install of the php5-cgi package. When the php5-cgi package is installed on Debian and...

CentOS Update for gnupg2 CESA-2013:1459 centos5

Check for the Version of gnupg2 OpenVAS Vulnerability Test CentOS Update for gnupg2 CESA-2013:1459 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Apache + PHP 5.3.12 5.4.2 - cgi-bin Remote Code Execution

Apache + PHP 5.3.12 5.4.2 - cgi-bin Remote Code Execution / Apache Magica by Kingcope / / gcc apache-magika.c -o apache-magika -lssl / / This is a code execution bug in the combination of Apache and PHP. On Debian and Ubuntu the vulnerability is present in the default install of the php5-cgi...

Fedora Update for bugzilla FEDORA-2013-19480

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...