Ubuntu: Security Advisory (USN-2258-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : GnuPG vulnerability (USN-2258-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2258-1 advisory. Jean-Ren Reinhard, Olivier Levillain and Florian Maury discovered that GnuPG incorrectly handled certain OpenPGP messages. If a user or automated system were...

CVE-2014-2258

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTPS packets, a different vulnerability than CVE-2014-2259...

CVE-2014-2258

CVE-2014-2258 affects Siemens SIMATIC S7-1200 CPU PLCs with firmware before 4.0. A crafted HTTPS packet can trigger a defect-mode transition, causing a denial of service. The issue is distinct from CVE-2014-2259. The vulnerability is triggered via remote network access to the device’s HTTPS handl...

Siemens SIMATIC S7-1200多个漏洞

CVE ID: CVE-2014-2249,CVE-2014-2250,CVE-2014-2252,CVE-2014-2254,CVE-2014-2256,CVE-2014-2258 SIMATIC S7-1200是可编程控制器，可实现简单却高度精确的自动化任务。 Siemens SIMATIC S7-1200 4.0.0之前版本在实现上存在多个漏洞，可被恶意利用执行跨站请求伪造、劫持用户会话、造成拒绝服务。 1、向TCP端口443发送特制的数据包造成的错误可造成设备进入defect模式。 2、随机生成器内弱熵相关错误，可导致劫持另外用户的会话。...

PT-2014-3236 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions 4.0 through 4.0-2258 Synology DiskStation Manager DSM versions 4.2 through 4.2-3242 Synology DiskStation Manager DSM versions 4.3 through 4.3-3809 Description: The issue allows remote attackers to...

CVE-2012-2258

...

CVE-2012-2258

CVE-2012-2258 is rejected/not used; it does not represent an active vulnerability entry.

CVE-2011-2258

CVE-2011-2258 affects Oracle Solaris 8–11 Express via rksh (ksh) where local users could impact confidentiality, integrity, and availability. Connected patch data show Solaris 9 patches addressing the rksh/ksh vulnerability: patch 114343-16 for Solaris 9 x86 and patch 112964-18 for Solaris 9 SPAR...

Debian DSA-2258-1 : kolab-cyrus-imapd - implementation error

It was discovered that the STARTTLS implementation of the Kolab Cyrus IMAP server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted IMAP, LMTP, NNTP and POP3 sessions by sending a cleartext command that is processed after TLS is i...

Solaris 9 (x86) : 114343-16

SunOS 5.9x86: ksh patch. Date this patch was last updated by Sun : Apr/21/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 112964-18

SunOS 5.9: ksh patch. Date this patch was last updated by Sun : Apr/01/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid53281...

CVE-2010-2258

CVE-2010-2258 describes a cross-site scripting (XSS) vulnerability in signupconfirm.php of phpBannerExchange 1.2 Arabic . The issue allows remote attackers to inject arbitrary web script or HTML via the bannerurl parameter. The accompanying records consistently list this as a classic XSS in the s...

CVE-2009-2258

creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8963...

Memory corruption

Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to a document object "appended in a specific order," aka "HTML Objects Memory Corruption...

CVE-2008-2258

CVE-2008-2258 concerns Microsoft Internet Explorer 5.01, 6, and 7, where memory corruption occurs when HTML objects are appended in a specific order, leading to uninitialized memory access that can cause a remote crash and arbitrary code execution. The vulnerability is tied to how table layout/ht...

MS08-045: Cumulative Security Update for Internet Explorer (953838)

The remote host is missing the IE cumulative security update 953838. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33874;...

Fedora 8 : nx-3.1.0-25.1.fc8 (2008-2258)

Wed Jan 2 2008 Axel Thimm - 3.1.0-25 - Update to 3.1.0. - add nxcompshad, nxauth; remove nxviewer, nxdesktop. - add -fPIC for ppc64. - Propagate %optflags for x8664, too. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 2258)

This update brings MozillaFirefox to the security update release 1.5.0.8, including the following security fixes. Full details can be found on: http://www.mozilla.org/projects/security/known-vulnerabiliti es.html - Is split into 3 sub-entries, for ongoing stability improvements in the Mozilla...

CVE-2002-2258

CVE-2002-2258 affects Moby NetSuite. A remote attacker can crash the service by sending an HTTP POST with a Content-Length header containing a large integer or non-numeric value, triggering an access violation after a failed atoi(). The documents do not provide any remediation, exploit details, o...