Slackware: Security Advisory (SSA:2007-134-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : samba on SL5.x, SL4.x, SL3.x i386/x86_64

Various bugs were found in NDR parsing, used to decode MS-RPC requests in Samba. A remote attacker could have sent carefully crafted requests causing a heap overflow, which may have led to the ability to execute arbitrary code on the server. CVE-2007-2446 Unescaped user input parameters were bein...

Design/Logic Flaw

Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulnerability than CVE-2012-2446 and CVE-2012-2447...

CVE-2012-2446

CVE-2012-2446 is a real XSS vulnerability in Netsweeper’s WebAdmin Portal. The issue affects the WebAdmin Portal’s tools/local_lookup.php, where the group parameter in a lookup action can be exploited to inject arbitrary web script or HTML remotely. The root cause is an inadequate input validatio...

Netsweeper Internet Filter WebAdmin Portal multiple vulnerabilities

Overview Netsweeper Internet Filter WebAdmin Portal contains XSS, CSRF and SQLi vulnerabilities. Description Netsweeper Internet Filter's WebAdmin Portal contains the following XSS, CSRF and SQLi vulnerabilities.CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site...

Debian Security Advisory DSA 2446-1 (libpng)

The remote host is missing an update to libpng announced via advisory DSA 2446-1. OpenVAS Vulnerability Test $Id: deb24461.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2446-1 libpng Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2446-1 : libpng - incorrect memory handling

It was discovered that incorrect memory handling in the pngsettext2 function of the PNG library could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Gentoo Security Advisory GLSA 201201-02 (MySQL)

The remote host is missing updates announced in advisory GLSA 201201-02. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

MySQL < 5.0.83 Denial of Service

The version of MySQL installed on the remote host is earlier than 5.0.83 and thus reportedly allows a remote user to crash the server and possibly have other impacts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17804; scriptversion"1.6"; scriptcvsdate"Date:...

Adobe Shockwave Player DIRapi库拒绝服务漏洞(CVE-2011-2446)

CVE ID: CVE-2011-2446 Adobe Shockwave Player是播放使用Director Shockwave Studio制作的网页的外挂软件。 Adobe Shockwave Player在DIRapi库的实现上存在安全漏洞，可使攻击者执行任意代码或造成拒绝服务。 Adobe Shockwave Player 11.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-27）以及相应补丁: APSB11-27：Security update available for Adobe Shockwave Player...

CVE-2011-2446

The DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2448...

CVE-2011-2446

CVE-2011-2446 affects Adobe Shockwave Player’s DIRAPI.dll (before 11.6.3.633). The issue is a memory corruption/arbitrary code execution vulnerability via unspecified vectors in the Shockwave Player, as part of the Nov 2011 set of vulnerabilities (APSB11-27). Connected sources corroborate multipl...

Shockwave Player <= 11.6.1.629 Multiple Memory Corruption Vulnerabilities (APSB11-27)

The remote Windows host contains a version of Adobe's Shockwave Player that is 11.6.1.629 or earlier. As such, it is potentially affected by multiple memory corruption vulnerabilities. A remote attacker could exploit these issues by tricking a user into viewing a malicious Shockwave file, resulti...

Samba LSA LsarAddPrivilegesToAccount Crafted Request Handling Heap Overflow (CVE-2007-2446)

Samba is an open-source implementation of the file, print, and other network services suite known as SMB/CIFS Server Message Block/Common Internet File System. A heap-based buffer overflow vulnerability exists in the way Samba handles RPC messages. The vulnerability is due to a boundary error whi...

CVE-2007-2446

creationtimestamp| type| source ---|---|--- 2010-04-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16875 2010-04-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16329 2010-07-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16859 2018-05-29...

Samba 3.0.10 (OSX) - 'lsa_io_trans_names' Heap Overflow (Metasploit)

$Id: lsatransnamesheap.rb 9021 2010-04-05 23:34:10Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Debian DSA-1877-1 : mysql-dfsg-5.0 - denial of service/execution of arbitrary code

In MySQL 4.0.0 through 5.0.83, multiple format string vulnerabilities in the dispatchcommand function in libmysqld/sqlparse.cc in mysqld allow remote authenticated users to cause a denial of service daemon crash and potentially the execution of arbitrary code via format string specifiers in a...

RHEL 4 : mysql (RHSA-2010:0110)

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server...

MySQL vulnerabilities

No description provided by source. =========================================================== Ubuntu Security Notice USN-897-1 February 10, 2010 mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities CVE-2008-4098, CVE-2008-4456, CVE-2008-7247, CVE-2009-2446, CVE-2009-4019, CVE-2009-4030, CVE-2009-4484...

Security fix for the ALT Linux 5 package MySQL version 5.0.89-alt1

Jan. 25, 2010 Anton Farygin 5.0.89-alt1 - new version closes 18943 - fixed CVE-2009-2446 from upstream closes 20724 - setup utf8 encoding instead of latin1 by default closes 12390 - include C99 aliasing violation patch from mythtv closes 22452 - removed username-length patch - wait for mysqld...