189 matches found
USN-1471-1: Linux kernel (Oneiric backport) vulnerabilities
Andy Adamson discovered a flaw in the Linux kernel's NFSv4 implementation. A remote NFS server attacker could exploit this flaw to cause a denial of service. CVE-2011-4131 A flaw was discovered in the Linux kernel's KVM kernel virtual machine. An administrative user in the guest OS could leverage...
Debian Security Advisory DSA 2384-2 (cacti)
The remote host is missing an update to cacti announced via advisory DSA 2384-2. OpenVAS Vulnerability Test $Id: deb23842.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2384-2 cacti Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
[SECURITY] [DSA 2384-2] cacti regression
------------------------------------------------------------------------- Debian Security Advisory DSA-2384-2 [email protected] http://www.debian.org/security/ February 04, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...
Debian DSA-2384-2 : cacti - several vulnerabilities
Several vulnerabilities have been discovered in Cacti, a graphing tool for monitoring data. Multiple cross site scripting issues allow remote attackers to inject arbitrary web script or HTML. A SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands. %NASLMINLEVEL...
SuSE 10 Security Update : apache2-mod_auth_mysql (ZYPP Patch Number 7682)
This update of apache2-modauthmysql fixes a possible SQL injection vulnerability that can be exploited using multibyte character encoding. CVE-2008-2384: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N: SQL Injection. CWE-89 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...
Fedora Update for mod_auth_mysql FEDORA-2011-0114
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for mod_auth_mysql FEDORA-2011-0100
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 13 : mod_auth_mysql-3.0.0-12.fc13 (2011-0114)
This update fixes a security issue in modauthmysql. A flaw was found in the way modauthmysql escaped certain multibyte-encoded strings. If modauthmysql was configured to use a multibyte character set that allowed a backslash '' as part of the character encodings, a remote attacker could inject...
mod_auth_mysql security update
1:3.0.0-11.1 - add security fix for CVE-2008-2384 663617...
RHEL 6 : mod_auth_mysql (RHSA-2010:1002)
An updated modauthmysql package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
Solaris wbem Unsafe Use Of Temporary Files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Below is the full disclosure information for CVE-2010-2384. It was reported to [email protected] on 3 January, 2010 and assigned Sun bug 6913886. This vulnerability was addressed by Sun/Oracle in the July 2010 Critical Patch Update...
CVE-2010-2384: Solaris wbem unsafe use of temporary files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Below is the full disclosure information for CVE-2010-2384. It was reported to [email protected] on 3 January, 2010 and assigned Sun bug 6913886. This vulnerability was addressed by Sun/Oracle in the July 2010 Critical Patch Update...
CVE-2010-2384
CVE-2010-2384 affects Oracle Solaris 9/10. The Solaris wbem service, when enabled, runs SUNWrmui_reg.sh and can be abused by an unprivileged local user via unsafe handling of temporary files in /tmp, potentially impacting confidentiality and integrity. A full disclosure and patching guidance desc...
Mandriva Security Advisory MDVSA-2009:189-1 (apache-mod_auth_mysql)
The remote host is missing an update to apache-modauthmysql announced via advisory MDVSA-2009:189-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Mandriva Security Advisory MDVSA-2009:189-1 (apache-mod_auth_mysql)
The remote host is missing an update to apache-modauthmysql announced via advisory MDVSA-2009:189-1. OpenVAS Vulnerability Test $Id: mdksa20091891.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:189-1 apache-modauthmysql Authors: Thomas Reinke...
Mandrake Security Advisory MDVSA-2009:189 (apache-mod_auth_mysql)
The remote host is missing an update to apache-modauthmysql announced via advisory MDVSA-2009:189. OpenVAS Vulnerability Test $Id: mdksa2009189.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:189 apache-modauthmysql Authors: Thomas Reinke Copyright:...
Mandrake Security Advisory MDVSA-2009:189 (apache-mod_auth_mysql)
The remote host is missing an update to apache-modauthmysql announced via advisory MDVSA-2009:189. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Mandriva Linux Security Advisory : apache-mod_auth_mysql (MDVSA-2009:189-1)
A vulnerability has been found and corrected in modauthmysql : SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x allows remote attackers to execute arbitrary SQL commands via multibyte character encodings for...
CVE-2009-2384
CVE-2009-2384 describes a buffer overflow in amp.exe of Brothersoft PEamp 1.02b, where a long string in a .m3u playlist can be used by a user to trigger arbitrary code execution on a remote system. The issue is user-assisted and involves crafting a playlist to overflow a vulnerable buffer, yieldi...
