openSUSE Security Update : otrs (openSUSE-SU-2011:1017-1)

OTRS administrators may read arbitrary local files CVE-2011-2746. OTRS was updated to version 2.4.11 which fixes the issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update otrs-5098. The text...

openSUSE Security Update : otrs (openSUSE-SU-2011:1017-1)

OTRS administrators may read arbitrary local files CVE-2011-2746. OTRS was updated to version 2.4.11 which fixes the issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update otrs-5098. The text...

CVE-2014-2746

The CVE-2014-2746 issue affects Tigase before version 5.2.1, where net/IOService.java inadequately restricts processing of compressed XML elements. This allows remote attackers to trigger resource consumption and potential denial of service via a crafted XMPP stream (xmppbomb). The vulnerability ...

Debian: Security Advisory (DSA-2746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[security bulletin] HPSBUX02881 SSRT101189 rev.1 - HP-UX Directory Server, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03772083 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03772083 Version: 1 HPSBUX02881...

CentOS Update for 389-ds-base CESA-2012:0997 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-2746

389 Directory Server before 1.2.11.6 aka Red Hat Directory Server before 8.2.10-3, when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password...

CVE-2012-2746

CVE-2012-2746 affects 389-ds-base/Red Hat Directory Server prior to 1.2.11.6: when an LDAP user password is changed and audit logging is enabled, the new password is saved to logs in plain text, permitting remote authenticated users to read it. Affected version note appears in multiple advisories...

Moderate: Red Hat Security Advisory: redhat-ds-base security update

Updated redhat-ds-base packages that fix two security issues are now available for Red Hat Directory Server 8. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

RedHat Update for 389-ds-base RHSA-2012:0997-01

Check for the Version of 389-ds-base OpenVAS Vulnerability Test RedHat Update for 389-ds-base RHSA-2012:0997-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RHEL 6 : 389-ds-base (RHSA-2012:0997)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0997 advisory. - rhds/389: plaintext password disclosure flaw CVE-2012-2678 - rhds/389: plaintext password disclosure in audit log CVE-2012-2746 Note that...

CVE-2011-2746

CVE-2011-2746 affects Open Ticket Request System (OTRS) – specifically OTRS-Core kernel module Kernel/Modules/AdminPackageManager.pm. Affected are OTRS 2.x prior to 2.4.11 and 3.x prior to 3.0.10. The vulnerability allows remote authenticated administrators to read arbitrary files via unknown vec...

CVE-2011-2746

Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System OTRS 2.x before 2.4.11 and 3.x before 3.0.10 allows remote authenticated administrators to read arbitrary files via unknown vectors...

Microsoft Windows Common Control Library Heap Buffer Overflow (MS10-081; CVE-2010-2746)

The common controls are a set of windows that are implemented by the common control library, Comctl32.dll, which is a DLL included with the Windows operating system. Like other control windows, a common control is a child window that an application uses in conjunction with another window to enabl...

CVE-2010-2746

creationtimestamp| type| source ---|---|--- 2011-01-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15963...

CVE-2010-2746

CVE-2010-2746 describes a heap-based buffer overflow in the Windows common controls library, Comctl32.dll, triggered when processing messages from a third-party SVG viewer. A remote code execution risk exists on affected Windows releases (XP SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008, and W...

CVE-2009-2746

Cross-site request forgery CSRF vulnerability in the administrative console in the Security component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified...

CVE-2009-2746

CVE-2009-2746: IBM WebSphere Application Server’s administrative console is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. Affected versions: WAS 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7. The issue allows an attacker to hijack the authentication of admini...

CVE-2009-2746

Cross-site request forgery CSRF vulnerability in the administrative console in the Security component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified...

Fedora Core 10 FEDORA-2009-2746 (ejabberd)

The remote host is missing an update to ejabberd announced via advisory FEDORA-2009-2746. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...