ZDI-11-237: CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability

ZDI-11-237: CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-237 July 20, 2011 -- CVE ID: CVE-2011-2667 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: CA -- Affected Products: CA Tota...

VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0011 Synopsis: VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0. Issue date:...

VMSA-2010-0011:VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.

VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0011 VMware Security Advisory Synopsis: VMware Studio 2.1 addresses security vulnerabilities in virtual...

CVE-2009-2667

Unspecified vulnerability in IBM Tivoli Key Lifecycle Manager TKLM 1.0 has unknown impact and attack vectors, related to a "password security vulnerability."...

CVE-2009-2667

Technical details for CVE-2009-2667 are not publicly available in the provided documents; no concrete affected products, versions, impact, or remediation are specified. Monitor for updates.

CVE-2009-2667

Unspecified vulnerability in IBM Tivoli Key Lifecycle Manager TKLM 1.0 has unknown impact and attack vectors, related to a "password security vulnerability."...

openSUSE Security Update : courier-authlib (courier-authlib-42)

This update of courier-authlib fixes a bug that allowed SQL injections. CVE-2008-2667 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update courier-authlib-42. The text description of this plugin is...

[SECURITY] [DSA 1688-2] New courier-authlib packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1688-2 [email protected] http://www.debian.org/security/ Steffen Joeris December 22, 2008 http://www.debian.org/security/faq -...

Debian DSA-1688-1 : courier-authlib - SQL injection

Two SQL injection vulnerabilities have been found in courier-authlib, the courier authentification library. The MySQL database interface used insufficient escaping mechanisms when constructing SQL statements, leading to SQL injection vulnerabilities if certain charsets are used CVE-2008-2380 . A...

[SECURITY] [DSA 1688-1] New courier-authlib packages fix SQL injection

------------------------------------------------------------------------ Debian Security Advisory DSA-1688 [email protected] http://www.debian.org/security/ Steffen Joeris December 20, 2008 http://www.debian.org/security/faq -...

DSA-1688-1 courier-authlib - SQL injection

Bulletin has no description...

Gentoo Security Advisory GLSA 200606-08 (wordpress)

The remote host is missing updates announced in advisory GLSA 200606-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-08 (wordpress)

The remote host is missing updates announced in advisory GLSA 200606-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ GLSA 200809-05 ] Courier Authentication Library: SQL injection vulnerability

Gentoo Linux Security Advisory GLSA 200809-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2008-2667

SQL injection vulnerability in the Courier Authentication Library aka courier-authlib before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified...

CVE-2008-2667

CVE-2008-2667 is a SQL injection vulnerability in courier-authlib (courier-authlib) affecting MySQL interface when certain charsets are used, enabling an attacker to inject SQL via the username and related vectors. Multiple advisories (Debian DSA-1688-1/1688-2, openSUSE/Tenable/Nessus listings) c...

openSUSE 10 Security Update : courier-authlib (courier-authlib-5352)

This update of courier-authlib fixes a bug that allowed SQL injections. CVE-2008-2667 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update courier-authlib-5352. The text description of this plugin ...

Buffer overflow

Buffer overflow in the DB Software Laboratory VImpX VImpAX1 ActiveX control in VImpX.ocx 4.7.3.0 allows remote attackers to execute arbitrary code via a long RejectedRecordsFile parameter, a different vector than CVE-2007-2667...

CVE-2007-2667

The CVE-2007-2667 entry concerns the DB Software Laboratory VImpX ActiveX control (VImpX.ocx) version 4.7.3. Affected component: VImpX.ocx. Vulnerability: a buffer overflow triggered by a long LogFile parameter, allowing remote attackers to execute arbitrary code. Exploitation details are not pro...

CVE-2004-2667

CVE-2004-2667 describes a cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2. According to the provided sources, remote attackers could inject arbitrary web script or HTML via unknown attack vectors. The vulnerability is documented across multiple f...