Gentoo Security Advisory GLSA 201412-47

Gentoo Linux Local Security Checks GLSA 201412-47 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

GLSA-201412-47 : TORQUE Resource Manager: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-47 TORQUE Resource Manager: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TORQUE Resource Manager. Please review the CVE identifiers referenced below for details. Impact : A context-dependent...

ACDSee XPM File Section Buffer Overflow

No description provided by source. $Id: acdseexpm.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2013-2193

Apache HBase 0.92.x (pre-0.92.3) and 0.94.x (pre-0.94.9) with Kerberos enabled is affected. An attacker in MITM position can disable bidirectional RPC authentication between client and RegionServer, potentially leaking sensitive information via unspecified vectors. Root cause: RPC bidirectional a...

CVE-2014-2193

CVE-2014-2193 affects Cisco Unified Web and E-Mail Interaction Manager. Root cause: improper use of session identifiers in GET requests, enabling a remote attacker to inject conversation text by obtaining a valid session identifier. Affected products and impact are described in Cisco advisory and...

Ubuntu: Security Advisory (USN-2193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache HBase RPC身份验证中间人安全措施绕过漏洞(CVE-2013-2193)

BUGTRAQ ID: 61981 CVECAN ID: CVE-2013-2193 HBase是一个分布式、版本化、构建在Apache Hadoop和Apache ZooKeeper上的列数据库 HBase 0.92.x、0.94.x版本在实现上存在安全绕过漏洞，从客户端到Region服务器的RPC流量可能会被具有任务运行权限的恶意用户及集群容器截获。Apache HBase RPC协议用来提供客户端和服务器之间的双向身份验证。但是恶意服务器或网络攻击者可以单方面禁用这些身份验证检查。这可导致绕过RPC流量保护机制。如果通过RPC传递身份验证凭证，也可导致权限提升 0 Apache...

Oracle Linux 4 : libtiff (ELSA-2008-0848)

From Red Hat Security Advisory 2008:0848 : Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a...

CentOS 4 : libtiff (CESA-2008:0848)

Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

Scientific Linux Security Update : libtiff on SL3.x, SL4.x, SL5.x i386/x86_64

Multiple uses of uninitialized values were discovered in libtiff's Lempel-Ziv-Welch LZW compression algorithm decoder. An attacker could create a carefully crafted LZW-encoded TIFF file that would cause an application linked with libtiff to crash or, possibly, execute arbitrary code. CVE-2008-232...

Debian DSA-2329-1 : torque - buffer overflow

Bartlomiej Balcerek discovered several buffer overflows in TORQUE server, a PBS-derived batch processing server. This allows an attacker to crash the service or execute arbitrary code with privileges of the server via crafted job or host names. The oldstable distribution lenny does not contain...

[SECURITY] [DSA 2329-1] torque security update

-------------------------------------------------------------------------- Debian Security Advisory DSA-2329-1 [email protected] http://www.debian.org/security/ Nico Golde Oct 27th, 2011 http://www.debian.org/security/faq -...

Fedora Update for torque FEDORA-2011-8072

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : torque-3.0.1-4.fc15 (2011-8072)

This update fixes a buffer overflow that could allow for remote arbitrary code execution by a torque service. Credit to Bartlomiej Balcerek - CVE-2011-2193. Warning: Packages previous to torque-3.0.1-4.fc15 within Fedora 15 contained the empty file /var/lib/torque/serverpriv/nodes . This file is ...

CVE-2011-2193

Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow 1 remote authenticated users to gain privileges via a long JobName field in a qsub command to the server, and might allow 2...

CVE-2011-2193

CVE-2011-2193 affects the TORQUE Resource Manager (Terascale Open-Source Resource and Queue Manager). The vulnerability consists of multiple buffer overflows triggered by overly long fields in qsub (Job_Name) and possibly in pbs_iff (host variable). Affected versions are TORQUE 2.x before 2.4.14,...

Fedora Update for torque FEDORA-2011-8117

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2193-1 : libcgroup - several vulnerabilities

Several issues have been discovered in libcgroup, a library to control and monitor control groups : - CVE-2011-1006 Heap-based buffer overflow by converting list of controllers for given task into an array of strings could lead to privilege escalation by a local attacker. - CVE-2011-1022 libcgrou...

ACDSee - '.XPM' File Section Buffer Overflow (Metasploit)

$Id: acdseexpm.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ requi...

CVE-2007-2193

creationtimestamp| type| source ---|---|--- 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16632 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/acdseexpm.rb 2025-02-06 03:13:38+00:00| seen|...