ESA-2013-002: RSA Archer® GRC Multiple Vulnerabilities

ESA-2013-002.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-002: RSA Archer® GRC Multiple Vulnerabilities EMC Identifier: ESA-2013-002 CVE Identifier: CVE-2012-2293, CVE-2012-2292, CVE-2012-1064, CVE-2012-2294 Severity Rating: See below for scores for individual issues Affected...

Debian Security Advisory DSA 2293-1 (libxfont)

The remote host is missing an update to libxfont announced via advisory DSA 2293-1. OpenVAS Vulnerability Test $Id: deb22931.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2293-1 libxfont Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2293-1 : libxfont - buffer overflow

Tomas Hoger found a buffer overflow in the X.Org libXfont library, which may allow for a local privilege escalation through crafted font files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

CVE-2011-2293

CVE-2011-2293 affects Oracle Solaris 11 Express. The vulnerability is described as an unspecified local-privilege/availability issue related to Zones, with unknown vectors and a confirmed impact to availability (CVE entry shows NEG/LOCAL access, no confidentiality or integrity impact). The NVD me...

SuSE 11 Security Update : Apache 2 (SAT Patch Number 2293)

The following bugs have been fixed : - When using a multithreaded MPM Apache could leak memory of requests handled by a different thread when processing subrequests. CVE-2010-0434 - Specially crafted requests could crash modproxyajp. CVE-2010-0408 %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2010-2293

CVE-2010-2293 affects the Ping tools web interface of the D-Link DI-604 router. The issue allows remote authenticated users to trigger a denial of service by submitting a large value in the “ip textfield” input. The available documents confirm the vulnerability description but do not provide expl...

CVE-2009-2293

Optimum Web Design Tutorial Share 3.5.0 and earlier is affected. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting the usernamed cookie parameter. The NVD entry assigns CVSSv2 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack...

CVE-2008-2293

The CVE-2008-2293 issue affects Multi-Page Comment System (MPCS) 1.0 and 1.1, where remote attackers can bypass authentication and escalate privileges by setting the CommentSystemAdmin cookie to 1. The available sources describe an authentication bypass via a cookie manipulation, marking it as a ...

CVE-2008-2293

admin.php in Multi-Page Comment System MPCS 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1...

CVE-2002-2293

CVE-2002-2293 concerns the Webshots Desktop screensaver, where local users can bypass the screensaver password by pressing CTRL-ALT-DELETE and either cancelling the dialog or terminating the screensaver process. The description in the provided records (NVD/CVE entries) confirms a local-privilege-...

Asterisk SIP Channel T.38 SDP Parsing Multiple Buffer Overflows

The version of Asterisk running on the remote host contains two stack-based buffer overflows in its SIP SDP handler when attempting to read the 'T38FaxRateManagement:' and 'T38FaxUdpEC:' options in the SDP within a SIP packet. An unauthenticated, remote attacker may be able to leverage this flaw ...

CVE-2007-2293

Asterisk’s SIP channel T.38 SDP parser (chan_sip.c) contains multiple stack-based buffer overflows in process_sdp, exploitable by long T38FaxRateManagement or T38FaxUdpEC SDP parameters in SIP INVITE messages. Affected are Asterisk versions before 1.4.3. Exploitation allows remote code execution;...

Solaris 9 (sparc) : 118829-04

Sun Management Center 3.5.1: Solaris 9 Oracle Patch. Date this patch was last updated by Sun : Jun/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

CVE-2006-2293

CVE-2006-2293 affects MultiCalendars 3.0: SQL injection vulnerability in all_calendars.asp exploitable via the calsids parameter. Remote attackers can execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD/NVD duplicate entries) with note that details origina...

CVE-2004-2293

PHP-Nuke 6.0–7.3 is affected by multiple XSS flaws in the Encyclopedia module (via the eid parameter or the module query), in Reviews module via the preview_review function (parameters: url, cover, rlanguage, hits), and in Reviews via savecomment (uname parameter). Root cause: improper handling o...

CVE-2002-2293

Webshots Desktop screensaver allows local users to bypass the password on the screensaver by pressing CTRL-ALT-DELETE and 1 hitting the cancel button or 2 killing the screensaver from the task manager...