VIGOR 2130 Command Injection / Cross Site Request Forgery

VIGOR 2130 firmware 1.5.4.9 1.1. Command injection in traceroute functionality A user can execute arbitrary commands RCE on the router by abusing the traceroute functionality. The interface expects an IP address as input, but does not validate the input. Just provide the input: ; id The above...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0897-1)

The update to Flash-Player 10.3.188.5 fixes various security issues : - CVE-2011-2130: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2134: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2135: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2136: CVSS v...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0897-1)

The update to Flash-Player 10.3.188.5 fixes various security issues : - CVE-2011-2130: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2134: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2135: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2136: CVSS v...

CVE-2013-2130

ZNC 1.0 allows remote authenticated users to cause a denial of service NULL pointer reference and crash via a crafted request to the 1 editnetwork, 2 editchan, 3 addchan, or 4 delchan page in modules/webadmin.cpp...

CVE-2013-2130

CVE-2013-2130 affects ZNC 1.0: remote authenticated users can trigger a denial of service by sending crafted requests to WebAdmin pages (editnetwork, editchan, addchan, delchan), causing NULL pointer dereferences and crashes. The connected sources corroborate multiple NULL pointer dereferences an...

Ubuntu: Security Advisory (USN-2130-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : tomcat6, tomcat7 vulnerabilities (USN-2130-1)

It was discovered that Tomcat incorrectly handled certain inconsistent HTTP headers. A remote attacker could possibly use this flaw to conduct request smuggling attacks. CVE-2013-4286 It was discovered that Tomcat incorrectly handled certain requests submitted using chunked transfer encoding. A...

HylaFAX+ 5.2.4 5.5.3 - Buffer Overflow

HylaFAX+ 5.2.4 5.5.3 - Buffer Overflow Details =========================================================== Application: "HylaFAX+" Version: 5.2.4 April, 2008 through 5.5.3 August 6, 2013 Type: Daemon that manages a fax server via an FTP-like protocol. Vendor / Maintainer: Lee Howard faxguy at...

HylaFAX+ 5.2.4 > 5.5.3 - Buffer Overflow

Details =========================================================== Application: "HylaFAX+" Version: 5.2.4 April, 2008 through 5.5.3 August 6, 2013 Type: Daemon that manages a fax server via an FTP-like protocol. Vendor / Maintainer: Lee Howard faxguy at howardsilvan.com Project Homepage:...

CVE-2130-5680, HylaFAX+ heap overflow, unchecked network traffic.

Details =========================================================== Application: "HylaFAX+" Version: 5.2.4 April, 2008 through 5.5.3 August 6, 2013 Type: Daemon that manages a fax server via an FTP-like protocol. Vendor / Maintainer: Lee Howard faxguy at howardsilvan.com Project Homepage:...

HylaFAX+ 5.5.3 Buffer Overflow

Details =========================================================== Application: "HylaFAX+" Version: 5.2.4 April, 2008 through 5.5.3 August 6, 2013 Type: Daemon that manages a fax server via an FTP-like protocol. Vendor / Maintainer: Lee Howard faxguy at howardsilvan.com Project Homepage:...

MGASA-2013-0257 Updated znc package fixes CVE-2013-2130

Updated znc packages fix security vulnerability: Multiple vulnerabilities were reported in ZNC version 1.0 which can be exploited by malicious authenticated users to cause a denial of service. These flaws are due to errors when handling the "editnetwork", "editchan", "addchan", and "delchan" page...

Fedora 18 : znc-1.2-0.1.alpha1.fc18 (2013-14123)

Update to 1.2-alpha1 Fix CVE-2013-2130 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora Update for znc FEDORA-2013-14132

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201201-19 (acroread)

The remote host is missing updates announced in advisory GLSA 201201-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201110-11 (Adobe Flash Player)

The remote host is missing updates announced in advisory GLSA 201110-11. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 7679)

The update to Flash-Player 10.3.188.5 fixes various security issues : - CVE-2011-2130: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2134: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2135: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2136: CVSS v...

RHEL 6 : acroread (RHSA-2011:1434)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1434 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes multiple security flaws in Adobe...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...

Adobe Air and Flash Player Multiple Vulnerabilities (Mac OS X)

This host is installed with Adobe Air and/or Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeprdtsmultvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Adobe Air and Flash Player Multiple Vulnerabilities Mac OS X Authors: Madhuri D Copyright:...