openSUSE Security Update : opie (openSUSE-SU-2011:0848-1)

This update fixes off-by-one errors in opiesu CVE-2011-2489 and missing setuid return value checks in opielogin CVE-2011-2490. This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local : /usr/bin/opiesu...

Debian: Security Advisory (DSA-2489-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2489-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey. - CVE-2012-1937 Mozilla developers discovered several memory corruption bugs, which may lead to the execution of arbitrary code. - CVE-2012-1940 Abhishek Arya discovered a use-after-free probl...

SuSE 10 Security Update : opie (ZYPP Patch Number 7594)

This update fixes off-by-one errors in opiesu CVE-2011-2489 and missing setuid return value checks in opielogin. CVE-2011-2490 This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local : /usr/bin/opiesu...

Debian: Security Advisory (DSA-2281-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : opie (ZYPP Patch Number 7595)

This update fixes off-by-one errors in opiesu CVE-2011-2489 and missing setuid return value checks in opielogin. CVE-2011-2490 This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local : /usr/bin/opiesu...

SuSE 11.1 Security Update : opie (SAT Patch Number 4815)

This update fixes off-by-one errors in opiesu CVE-2011-2489 and missing setuid return value checks in opielogin. CVE-2011-2490 This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local : /usr/bin/opiesu...

SuSE 11.1 Security Update : opie (SAT Patch Number 4815)

This update fixes off-by-one errors in opiesu CVE-2011-2489 and missing setuid return value checks in opielogin. CVE-2011-2490 This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local : /usr/bin/opiesu...

CVE-2011-2489

The connected records confirm CVE-2011-2489 affects the opiesu binary in OPIE 2.4.1-test1 and earlier, caused by multiple off-by-one errors in opiesu.c that could allow local privilege escalation. Affected products include openSUSE/SUSE releases (opie package) with fixes shipped as opie-4812 and ...

[SECURITY] [DSA 2281-1] opie security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2281-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 21, 2011 http://www.debian.org/security/faq -...

Debian DSA-2281-1 : opie - several vulnerabilities

Sebastian Krahmer discovered that opie, a system that makes it simple to use One-Time passwords in applications, is prone to a privilege escalation CVE-2011-2490 and an off-by-one error, which can lead to the execution of arbitrary code CVE-2011-2489 . Adam Zabrocki and Maksymilian Arciemowicz al...

[SECURITY] [DSA 2281-1] opie security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2281-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 21, 2011 http://www.debian.org/security/faq -...

DSA-2281-1 opie - several

Bulletin has no description...

Ruby 'ARGF.inplace_mode' Buffer Overflow Vulnerability

This host is installed with Ruby and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbrubybofvulnwin.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby 'ARGF.inplacemode' Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright C 2010 Greenbone Networks GmbH...

CVE-2010-2489

Ruby 1.9.x before 1.9.1-p429 on Windows is affected by a buffer overflow in ARGF.inplace_mode used when constructing backup filenames, allowing local privilege escalation. The issue is addressed in Ruby 1.9.1-p429 (Ruby on Windows update). Affected components: Ruby 1.9.x, ARGF.inplace_mode handli...

Ruby ARGF.inplace_mode变量缓冲区溢出漏洞

BUGTRAQ ID: 41321 CVE ID: CVE-2010-2489 Ruby是一种功能强大的面向对象的脚本语言。 Ruby在Windows系统上没有正确地处理文件名，用户对ARGF.inplacemode变量分配了超长值就可以触发缓冲区溢出，导致执行任意代码。 Yukihiro Matsumoto Ruby 1.9.x 厂商补丁： Yukihiro Matsumoto ------------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Unfixed XSS vulnerability at www.yasni.de

Security researcher kInGoFcHaOs, has submitted on 03/11/2010 a cross-site-scripting XSS vulnerability affecting www.yasni.de, which at the time of submission ranked 2489 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currentl...

CVE-2009-2489

Technical details for CVE-2009-2489 are not publicly provided in the connected documents. The references describe an unspecified local-access vulnerability in Sun Ray Server Software 4.0 but do not specify affected versions, exploitation vectors, or fixes. Monitor for updates.

CVE-2008-2489

The CVE-2008-2489 entry describes an SQL injection in TYPO3’s Library for Frontend Plugins (sg_zfelib) extension up to version 1.1.512. The vulnerability allows remote attackers to execute arbitrary SQL commands via an unspecified user input vector. Affected component: sg_zfelib (TYPO3). Root cau...

CVE-2007-2489

Affected software : LiveData Protocol Server (5.00.045 and older up to 5.00.062). Vulnerability : Heap-based buffer overflow caused by a crafted WSDL request that makes a negative length be passed to strncpy, leading to possible code execution or denial of service. The issue is triggered by overs...