MS12-069: Vulnerability in Kerberos Could Allow Denial of Service (2743555)

The remote Windows host is affected by a vulnerability that could result in a denial of service if a remote attacker sends a specially crafted session request to the Kerberos server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62464; scriptversion"1.10";...

CVE-2012-2551

CVE-2012-2551 is a Kerberos denial-of-service vulnerability affecting Microsoft Windows 7 (including SP1) and Windows Server 2008 R2 (including R2 SP1). The issue is described as a remote denial of service via a crafted Kerberos session request that triggers a NULL pointer dereference, potentiall...

Debian: Security Advisory (DSA-2551-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Icona SpA C6 Messenger Downloader Arbitrary File Download / Execute

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Icona SpA C6...

Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute

This module exploits a vulnerability in Icona SpA C6 Messenger 1.0.0.1. The vulnerability is in the DownloaderActiveX Control DownloaderActiveX.ocx. The insecure control can be abused to download and execute arbitrary files in the context of the currently logged-on user. This module requires...

SuSE 11.1 Security Update : openLDAP (SAT Patch Number 2551)

Several issues have been fixed in OpenLDAP : - specially crafted MODRDN operations can crash the OpenLDAP server. CVE-2010-0211 / CVE-2010-0212 - syncrepl might loose deletes in refreshAndPersist mode %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

MS10-054: Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214) (remote check)

The remote host is affected by several vulnerabilities in the SMB server that may allow an attacker to execute arbitrary code or perform a denial of service against the remote host. These vulnerabilities depend on access to a shared drive, but do not necessarily require credentials. C Tenable...

CVE-2010-2551

CVE-2010-2551 – SMB Variable Validation Vulnerability (Mode C) Affected software: SMB Server on Windows Vista SP1/SP2, Windows Server 2008 (Gold, SP2), and Windows 7. The issue arises in the SMB server’s handling of specially crafted SMB packets where internal fields are not properly validated in...

Microsoft Windows SMB Code Execution and DoS Vulnerabilities (982214)

This host is missing a critical security update according to Microsoft Bulletin MS10-054. OpenVAS Vulnerability Test $Id: secpodms10-054.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows SMB Code Execution and DoS Vulnerabilities 982214 Authors: Sooraj KS Updated By: Madhuri D on...

CVE-2005-2551

creationtimestamp| type| source ---|---|--- 2010-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16769 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/edirectoryimonitor.rb 2025-02-06 03:13:38+00:00|...

Novell eDirectory iMonitor NDS Server Buffer Overflow (CVE-2005-2551; CVE-2006-2496)

Novell eDirectory is a Lightweight Directory Access Protocol LDAP server intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. iMonitor, one of the many components of eDirectory, is a...

eDirectory 8.7.3 iMonitor Remote Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'eDirectory...

CVE-2009-2551

CVE-2009-2551 describes multiple XSS vulnerabilities in ScriptsEz Easy Image Downloader. The issue is triggered via the id parameter in a detail action to main.php (and possibly demo_page.php), allowing remote script/HTML injection. The provided documents do not include product versions, affected...

CVE-2009-2551

Multiple cross-site scripting XSS vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to 1 main.php and possibly 2 demopage.php...

CVE-2009-2551

creationtimestamp| type| source ---|---|--- 2009-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33085...

CVE-2008-2551

CVE-2008-2551 – Icona SpA C6 Messenger DownloaderActiveX control : The DownloaderActiveX.ocx in C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in propDownloadUrl when propPostDownloadAction is set to “run.” This is a remote code execu...

CVE-2008-2551

creationtimestamp| type| source ---|---|--- 2008-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5732 2012-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18449 2018-05-29 15:50:33+00:00| seen|...

CVE-2007-2551

Cross-site scripting XSS vulnerability in usersettings.php in WikkaWiki Wikka Wiki before 1.1.6.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2007-2551

CVE-2007-2551 affects WikkaWiki (Wikka Wiki) prior to 1.1.6.3. The vulnerability is a Cross-Site Scripting (XSS) in usersettings.php that allows remote attackers to inject arbitrary web script or HTML via the name parameter. Impact is consistent with an XSS in the name field, enabling script exec...

CVE-2006-2551

CVE-2006-2551 affects HP-UX B.11.00 kernel and allows local users to cause a Denial of Service via unknown vectors. The issue is documented in HP-UX DoS advisories (local timer-related DoS) and is addressed by HP patches PHKL_34940 and PHKL_34406 (SSRT051057/HPSBUX02120). Remediation: apply the r...