Oracle Linux 5 : dnsmasq (ELSA-2009-1238)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-1238 advisory. - problems with strings when enabling tftp CVE-2009-2957 and CVE-2009-2957 Tenable has extracted the preceding description block directly from the Orac...

CVE-2013-2957

CVE-2013-2957 is an XSS vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite (versions 6.x–9.x) prior to 9.1.0.3. The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, as described in the IBM advisory for the related family ...

Scientific Linux Security Update : dnsmasq on SL5.x i386/x86_64

CVE-2009-2957, CVE-2009-2958 dnsmasq: multiple vulnerabilities in TFTP server Core Security Technologies discovered a heap overflow flaw in dnsmasq when the TFTP service is enabled the '--enable-tftp' command line option, or by enabling 'enable-tftp' in '/etc/dnsmasq.conf'. If the configured...

Symantec Web Gateway Local File Manipulation Authentication Bypass Vulnerability

Symantec Web Gateway is prone to a local authentication-bypass vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2012-2957

creationtimestamp| type| source ---|---|--- 2012-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20064...

CVE-2012-2957

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue...

CVE-2012-2957

Symantec Web Gateway 5.0.x (pre-5.0.3.18) contains a local file inclusion vulnerability that allows privilege escalation by modifying local files in the management console. Affected product versions are before 5.0.3.18; remediation is to apply the vendor update/patch to 5.0.3.18 or newer per the ...

CVE-2012-2957

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue...

CentOS Update for gnutls CESA-2009:123 centos5 i386

Check for the Version of gnutls OpenVAS Vulnerability Test CentOS Update for gnutls CESA-2009:123 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for dnsmasq CESA-2009:1238 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-2957

Rockwell Automation FactoryTalk Diagnostics Viewer before version 2.30.00 (CPR9 SR3) is affected by a memory‑corruption vulnerability triggered by a crafted .ftd configuration file. The issue allows local users to execute arbitrary code when the vulnerable viewer processes the crafted file; it is...

CVE-2010-2957

Cross-site scripting XSS vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2957

CVE-2010-2957 affects Serendipity prior to 1.5.4. The issue is an XSS vulnerability that can allow remote attackers to inject arbitrary script/HTML when the Remember me login is enabled. Descriptions consistently cite XSS with unspecified vectors; a related advisory notes exploitation requires a ...

Security fix for the ALT Linux 5 package dnsmasq version 2.46-alt1.1.M51.2

March 1, 2010 Mikhail Efremov 2.46-alt1.1.M51.2 - fix TFTP server vulnerabilities CVE-2009-2957, CVE-2009-2958...

Debian DSA-1876-1 : dnsmasq - buffer overflow

Several remote vulnerabilities have been discovered in the TFTP component of dnsmasq. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2957 A buffer overflow in TFTP processing may enable arbitrary code execution to attackers which are permitted to u...

Dnsmasq TFTP Service Remote Heap Buffer Overflow (CVE-2009-2957)

Dnsmasq is a lightweight DNS forwarder and DHCP server, designed to provide DNS and optionally DHCP services to a small-scale network. Dnsmasq supports static and dynamic DHCP leases and BOOTP/TFTP/PXE for network booting of diskless machines. It includes a secure, read-only, TFTP server to allow...

Mandriva Security Advisory MDVSA-2009:321 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:321. OpenVAS Vulnerability Test $Id: mdksa2009321.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:321 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Fedora Core 10 FEDORA-2009-10252 (dnsmasq)

The remote host is missing an update to dnsmasq announced via advisory FEDORA-2009-10252. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 11 FEDORA-2009-10285 (dnsmasq)

The remote host is missing an update to dnsmasq announced via advisory FEDORA-2009-10285. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Gentoo Security Advisory GLSA 200909-19 (dnsmasq)

The remote host is missing updates announced in advisory GLSA 200909-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...