89 matches found
ifwatchd Privilege Escalation
This module attempts to gain root privileges on QNX 6.4.x and 6.5.x systems by exploiting the ifwatchd suid executable. ifwatchd allows users to specify scripts to execute using the '-A' command line argument; however, it does not drop privileges when executing user-supplied scripts, resulting in...
Debian Security Advisory DSA 2533-1 (pcp)
The remote host is missing an update to pcp announced via advisory DSA 2533-1. OpenVAS Vulnerability Test $Id: deb25331.nasl 7585 2017-10-26 15:03:01Z cfischer $ Description: Auto-generated from advisory DSA 2533-1 pcp Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian: Security Advisory (DSA-2533-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2533-1 : pcp - several vulnerabilities
It was discovered that Performance Co-Pilot pcp, a framework for performance monitoring, contains several vulnerabilities. - CVE-2012-3418 Multiple buffer overflows in the PCP protocol decoders can cause PCP clients and servers to crash or, potentially, execute arbitrary code while processing...
Gentoo Security Advisory GLSA 201110-14 (D-Bus)
The remote host is missing updates announced in advisory GLSA 201110-14. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
GLSA-201110-14 : D-Bus: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201110-14 D-Bus: Multiple vulnerabilities Multiple vulnerabilities have been discovered in D-Bus. Please review the CVE identifiers referenced below for details. Impact : The vulnerabilities allow for local Denial of Service daemo...
CVE-2011-2533
CVE-2011-2533 concerns D-Bus (DBus) 1.2.x prior to 1.2.28. The vulnerability arises in the configure script, enabling local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/. The issue is a local privilege/overwrite risk, with the documented impact of arbitra...
RealNetworks Helix Server RTSP SET_PARAMETERS Request Denial of Service (CVE-2009-2533)
Helix Server is a multi media server that is designed to serve streaming and static audio and video content. Helix project, Helix Server being part of it, is intended as a largely free software/open source digital media framework that runs on numerous operating systems and processors including...
RealNetworks Helix Server 12.x Multiple DoS
Binary data 5100.prm...
RealNetworks Helix Server < 13.0.0 Multiple Remote DoS
According to its banner, The remote host is running version 12.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are reportedly affected by multiple issues : - By sending a specially crafted 'RTSP' SETPARAMETERS request with a 'DataConvertBuffer' parameter and either no...
CVE-2009-2533
RealNetworks Helix Server and Helix Mobile Server
Real Helix DNA RTSP and SETUP Request Handler Vulnerabilities
Exploit for multiple platform in category dos / poc ============================================================= Real Helix DNA RTSP and SETUP Request Handler Vulnerabilities ============================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security...
Real Helix DNA - RTSP SETUP Request Handler
Real Helix DNA - RTSP SETUP Request Handler -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Real Helix DNA RTSP and SETUP request handler vulnerabilities 1. Advisory Information Title: Real Helix DNA RTSP and SETUP...
Core Security Technologies Advisory 2009.0227
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Real Helix DNA RTSP and SETUP request handler vulnerabilities 1. Advisory Information Title: Real Helix DNA RTSP and SETUP request handler vulnerabilities Advisory ID...
FreeBSD Ports: openvpn
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-2533
Multiple cross-site scripting (XSS) vulnerabilities exist in Phoenix View CMS Pre Alpha2 and earlier. The issue stems from unsanitized user input passed via the ltarget parameter to admin/admin_frame.php and via the conf parameter to the following pages in admin/module/: gbuch.admin.php, links.ad...
CVE-2008-2533
creationtimestamp| type| source ---|---|--- 2008-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5578...
CVE-2007-2533
Trend Micro ServerProtect 5.58 is affected by multiple buffer overflows exploitable via a crafted RPC message processed by (1) RPCFN_ActiveRollback in stcommon.dll, (2) ENG_SetRealTimeScanConfigInfo, or (3) ENG_SendEmail in eng50.dll. The vulnerabilities allow remote code execution with network a...
CVE-2006-2533
Cross-site scripting XSS vulnerability in 1 addWeblog.php and 2 leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags, which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag...