CVE-2012-2390

CVE-2012-2390 concerns a memory leak in mm/hugetlb.c of the Linux kernel up to version 3.4.2. The issue allows local users to trigger memory exhaustion or a system crash via invalid MAP_HUGETLB mmap operations. The connected Nessus advisories (UNITY_LINUX_UTSA and MIRACLE_LINUX AXSA entries) reit...

CVE-2012-2390

Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service memory consumption or system crash via invalid MAPHUGETLB mmap operations...

Debian Security Advisory DSA 2390-1 (openssl)

The remote host is missing an update to openssl announced via advisory DSA 2390-1. OpenVAS Vulnerability Test $Id: deb23901.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2390-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

SuSE 11 Security Update : libesmtp (SAT Patch Number 2390)

libesmtp did not properly handle wildcards and embedded null characters in the Common Name of X.509 certificates CVE-2010-1192 / CVE-2010-1194. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE...

Oracle Enterprise Manager Grid Control HTTP请求远程溢出漏洞

BUGTRAQ ID: 43945 CVE ID: CVE-2010-2390 Grid Control是为整个Oracle IT架构提供中心化监视、管理、生命周期管理功能的系统管理软件。 远程攻击者可以通过向Grid Control的EM Console组件提交超长的HTTP请求触发缓冲区溢出，导致执行任意指令。 Oracle Enterprise Manager Grid Control 10.x 厂商补丁： Oracle ------ Oracle已经为此发布了一个安全公告（cpuoct2010）以及相应补丁: cpuoct2010：Oracle Critical Patch...

VUPEN Security Research - Oracle Products HTTP Request Remote Buffer Overflow Vulnerability (CVE-2010-2390)

VUPEN Security Research - Oracle Products HTTP Request Remote Buffer Overflow Vulnerability CVE-2010-2390 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Oracle provides the world's most complete, open, and integrated business software and hardware systems, with more...

CVE-2010-2390

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown...

CVE-2010-2390

CVE-2010-2390 describes a buffer overflow in the Oracle Enterprise Manager Grid Control EM Console component when processing overly long HTTP requests. The vulnerability affects Oracle Database Server 10.1.0.5/10.2.0.3, Oracle Fusion Middleware 10.1.2.3/10.1.4.3, and Enterprise Manager Grid Contr...

CVE-2009-2390

CVE-2009-2390 is a vulnerability in the Joomla! BookFlip extension (com_bookflip) version 2.1. The issue is an SQL injection via the book_id parameter to index.php, potentially allowing remote attackers to execute arbitrary SQL commands. Affected component: com_bookflip 2.1 on Joomla!. Impact per...

CVE-2009-2390

creationtimestamp| type| source ---|---|--- 2009-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9040...

Gentoo Security Advisory GLSA 200508-02 (proftpd)

The remote host is missing updates announced in advisory GLSA 200508-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: proftpd, proftpd-mysql

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: proftpd, proftpd-mysql

The remote host is missing an update to the system as announced in the referenced advisory. VID c28f4705-043f-11da-bc08-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-2390

CVE-2008-2390 affects HP Software Update 4.0.0.1, where Hpufunction.dll exposes unsafe methods ExecuteAsync and Execute. The underlying issue is that an absolute pathname in the first argument allows remote code execution. Public exploits exist and the impact is arbitrary code execution with netw...

CVE-2008-2390

creationtimestamp| type| source ---|---|--- 2008-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5511...

CVE-2002-2390

CVE-2002-2390 concerns a buffer overflow in the IDENT daemon (identd) used by Trillian. Affects Trillian versions 0.6351, 0.725, 0.73, 0.74 and 1.0 pro; vulnerability arises from handling a long request, enabling remote denial of service (crash) and potentially arbitrary code execution. Public de...

Mac OS X Multiple Vulnerabilities (Security Update 2007-005)

The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2007-005 applied. This update fixes security flaws in the following applications : Alias Manager BIND CoreGraphics crontabs fetchmail file iChat mDNSResponder PPP ruby screen texinfo VPN C Tenable...

CVE-2007-2390

The CVE-2007-2390 issue is a buffer overflow in Apple Mac OS X iChat’s UPnP IGD handling. Specifically, processing crafted UPnP Internet Gateway Device packets could allow a remote attacker to cause a denial of service or execute arbitrary code. Affected versions are Mac OS X 10.3.9 and 10.4.9. R...

CVE-2006-2390

The set of connected documents confirms a cross-site scripting (XSS) vulnerability in OZJournals 1.2, exploitable via the vname parameter in the comments functionality. The CVSSv2 base score is 5.8 (Medium), with network access required and no user interaction needed, and impact described as part...

[SECURITY] [DSA 795-2] Updated i386 proftpd packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 795-2 [email protected] http://www.debian.org/security/ Michael Stone September 2, 2005 http://www.debian.org/security/faq -...