161 matches found
openSUSE 10 Security Update : clamav (clamav-5414)
This update brings clamav to version 0.93.3. It lists CVE-2008-2713 as fixed, but this was fixed in 0.93.1 already, but not mentioned. The update contains stability and bugfixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
openSUSE 10 Security Update : clamav (clamav-5356)
This update brings clamav to version 0.93.1. It fixes various bugs and one security issue : CVE-2008-2713: libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read. %NASLMINLEVEL 70300 C Tenable...
SuSE 10 Security Update : clamav (ZYPP Patch Number 5359)
Clamav was updated to version 0.93.1. It fixes various bugs and one security issue : - libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read. CVE-2008-2713 %NASLMINLEVEL 70300 C Tenable Network...
Fedora 9 : clamav-0.93.1-1.fc9 (2008-5476)
This update fixes : - Bug 451761 - CVE-2008-2713 clamav: DoS / crash via crafted petite file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
ClamAV petite.c无效内存访问绝服务漏洞
BUGTRAQ ID: 29750 CVECAN ID: CVE-2008-2713 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV的libclamav/petite.c文件中存在拒绝服务漏洞，如果用户受骗打开了特制的Petite加壳可执行程序的话，就会在以下代码段的memcpy中触发越界读取，导致拒绝服务的情况： cliwriteint32curpe+0x24, 0xffffffff; memcpypefile+rawbase, buffer+sectionsi.raw, sectionsi.rsz;...
CVE-2008-2713
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...
CVE-2008-2713
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...
CVE-2008-2713
CVE-2008-2713 affects libclamav/petite.c in ClamAV prior to 0.93.1. A remote attacker can trigger an out-of-bounds read by supplying a crafted Petite file, leading to a denial of service. The issue is rooted in Petite file handling and is mitigated by upgrading to ClamAV 0.93.1 or later, which in...
ClamAV < 0.93.1 Multiple Vulnerabilities
ClamAV is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"; ifdescription...
Solaris 5.9 (x86) : 126357-03
Sun Java System Access Manager 7.1 Solarisx86. Date this patch was last updated by Sun : Jun/19/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 5.10 (sparc) : 126356-03
Sun Java System Access Manager 7.1 Solaris. Date this patch was last updated by Sun : Jun/19/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 5.8 (x86) : 126357-03
Sun Java System Access Manager 7.1 Solarisx86. Date this patch was last updated by Sun : Jun/19/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 5.8 (sparc) : 126356-03
Sun Java System Access Manager 7.1 Solaris. Date this patch was last updated by Sun : Jun/19/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
CVE-2004-2713
CVE-2004-2713 affects Zone Alarm Pro 1.0–5.1. The issue is a local denial-of-service caused by improper permissions on the %windir%\Internet Logs directory, which is accessible to the EVERYONE group. Local users can modify folder contents or permissions, potentially preventing Zone Alarm Pro from...
CVE-2007-2713
CVE-2007-2713 relates to ifdate 2.x where an HTTP redirect is sent to the browser but the process does not exit when administrative credentials are missing. This can allow remote attackers to obtain administrative access by requesting the admin/ URI directly. The available connected sources confi...
CVE-2006-2713
CVE-2006-2713 affects Secure Elements Class 5 AVR client (aka C5 EVM) prior to version 2.8.1. The vulnerability stems from generating predictable CEIDs, allowing a remote attacker to determine the CEID of a protected asset. This information could be leveraged in subsequent attacks against AVR. Th...
CVE-2005-2713
CVE-2005-2713 concerns local privilege escalation in Mac OS X. The iDefense advisory details two related issues in the /usr/bin/passwd binary on affected builds (Mac OS X 10.3.9 and 10.4.5; server variants also mentioned): first, passwd accepts a password database option and does not verify write...
Mac OS X Multiple Vulnerabilities (Security Update 2006-001)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...
CVE-2005-2713
passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbitrary world-writable files as root by specifying an alternate file in the password database option...