Novell File Reporter Agent Arbitrary File Delete

NFRAgent.exe in Novell File Reporter allows remote attackers to delete arbitrary files via a full pathname in an SRS request with OPERATION set to 4 and CMD set to 5 against /FSF/CMD. This module has been tested successfully on NFR Agent 1.0.4.3 File Reporter 1.0.2 and NFR Agent 1.0.3.22 File...

CVE-2012-2750

CVE-2012-2750 refers to an unspecified vulnerability in MySQL 5.5.x before 5.5.23 with unknown impact and attack vectors related to a Security Fix (Bug #59533). The description notes this may be a duplicate of CVE-2012-1689, and Oracle had not commented on that possibility as of 2012-08-16. Sever...

CVE-2011-2750

CVE-2011-2750 affects Novell File Reporter NFRAgent.exe; prior versions up to 1.0.4.2 (and earlier) allow remote deletion of arbitrary files via a full pathname in an SRS request (OPERATION 4, CMD 5 to /FSF/CMD). Public material confirms PoC/exploit code (Metasploit module) and reports of an arbi...

Microsoft Word Unchecked Index Value Remote Code Execution (MS10-079; CVE-2010-2750)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in the way that Microsoft Word handles index values inside a specially crafted Word file. The vulnerability is due to an error in Microsoft Word that fails to properly parse specially...

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability (CVE-2010-2750)

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability CVE-2010-2750 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability t...

CVE-2010-2750

CVE-2010-2750 is the Word Index Vulnerability affecting Word 2002 SP3 and Office 2004 for Mac, caused by an array/index handling error that leads to memory corruption and remote code execution when opening a crafted Word file. Microsoft’s MS10-079 security bulletin (and related advisories) addres...

Microsoft Word Index Value Handling (CVE-2010-2750) Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

CVE-2009-2750

IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 is affected by CVE-2009-2750 due to missing/incorrect configuration properties, allowing remote authenticated users to access unspecified data via a property query. CVSS v2 base score 5.5 (MEDIUM): Network vector, low complexit...

openSUSE Security Update : kernel (kernel-111)

The openSUSE 11.0 kernel was updated to 2.6.25.11. It fixes following security problems: CVE-2008-2812: Various tty / serial devices did not check functionpointers for NULL before calling them, leading to potential crashes or code execution. The devices affected are usually only accessible by the...

Fedora Core 9 FEDORA-2009-6846 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-6846. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-5383 (kernel)

The remote host is missing an update to the kernel announced via advisory FEDORA-2009-5383. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Update for kernel FEDORA-2008-5893

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for kernel FEDORA-2008-5893

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2008-5893 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for kernel FEDORA-2008-11618

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Core 9 FEDORA-2009-0816 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-0816. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

SuSE Update for kernel SUSE-SA:2008:037

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse2008037.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel SUSE-SA:2008:037 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Fedora 9 : kernel-2.6.25.9-76.fc9 (2008-5893)

Update kernel from version 2.6.25.6 to 2.6.25.9: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.7 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.8 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9 Security updates: CVE-2008-2750: The pppol2tprecvmsg functi...

CVE-2008-2750

CVE-2008-2750 affects the Linux kernel (2.6.x) prior to 2.6.26-rc6. The vulnerability is in pppol2tp_recvmsg (drivers/net/pppol2tp.c) and can be triggered by a crafted PPPOL2TP packet that sets an abnormally large length value. Impact per the sources: remote attackers can cause a denial of servic...

CVE-2004-2750

CVE-2004-2750 : Affected: JBrowser 1.0–2.1; vulnerable component: browser.php. Description indicates a directory traversal flaw that lets a remote attacker read arbitrary files through the directory parameter. The note states provenance is unknown and details come from third parties. No exploitat...

CVE-2007-2750

SQL injection vulnerability in print.php of SimpNews versions up to 2.40.01 allows remote attackers to execute arbitrary SQL commands via the newsnr parameter. Affected component: print.php in SimpNews. Root cause: unsafeguarded input handling for the newsnr parameter leading to SQL injection. Im...