CA ARCserve Backup Authentication service invalid virtual function call

Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...

CVE-2012-2971

CA ARCserve Backup on Windows (RPC Services) is affected by CVE-2012-2971 due to improper RPC request handling that can allow remote code execution or cause a denial of service. The issue relates to the authentication/RPC processing path and is noted in multiple advisories and vulnerability feeds...

Slackware: Security Advisory (SSA:2005-310-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-995-1: libMikMod vulnerabilities

It was discovered that libMikMod incorrectly handled songs with different channel counts. If a user were tricked into opening a crafted song file, an attacker could cause a denial of service. CVE-2007-6720 It was discovered that libMikMod incorrectly handled certain malformed XM files. If a user...

Debian: Security Advisory (DSA-2081-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2971

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

CVE-2010-2971

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

CVE-2010-2971

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

CVE-2010-2971

CVE-2010-2971 concerns the libmikmod loader load_it.c, where a mismatch in handling name##env versus name##tick/name##node can cause a buffer over-read when processing Impulse Tracker files. The issue is a follow-up to CVE-2009-3995, with the CVE details noting a remote attacker could trigger the...

Debian DSA-2081-1 : libmikmod - buffer overflow

Tomas Hoger discovered that the upstream fix for CVE-2009-3995 was insufficient. This update provides a corrected package. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2081. The text...

IBM DB2 JDBC Applet Server远程拒绝服务漏洞

CVE ID：CVE-2009-2971 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2 JDBC Applet Server服务程序中的jdbcReadString函数存在一个安全漏洞，在转换UNICODE到ANSI字符的时候，没有判断报文中实际的字符串大小，而直接使用报文中的长度域。如果远程攻击者发送特殊构造的JDBC数据，无须认证即可导致JDBC Applet Server退出. IBM DB2 Universal Database...

NSFOCUS SA2009-02 : IBM DB2 JDBC Applet Server Remote DoS Vulnerability

NSFOCUS Security Advisory SA2009-02 IBM DB2 JDBC Applet Server Remote DoS Vulnerability Release Date: 2009-10-16 CVE ID: CVE-2009-2971 http://www.nsfocus.com/en/advisories/0902.html Affected system: ============== IBM DB2 Universal Database v8.1 Fixpak 15 v8.2 Fixpak 8 and lower versions IBM DB2...

Gentoo Security Advisory GLSA 200510-12 (koffice, kword)

The remote host is missing updates announced in advisory GLSA 200510-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200510-12 (koffice, kword)

The remote host is missing updates announced in advisory GLSA 200510-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2971

The CVE-2008-2971 entry concerns CiBlog 3.1, where a SQL injection in links-extern.php via the id parameter allows remote execution of arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication required, yieldin...

CVE-2008-2971

creationtimestamp| type| source ---|---|--- 2008-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5875...

Debian: Security Advisory (DSA-872-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-2971

The CVE-2007-2971 issue affects gCards 1.46 and earlier, where a SQL injection vulnerability in getnewsitem.php allows remote attackers to execute arbitrary SQL commands via the newsid parameter. This is a server-side input handling flaw, enabling potentially partial confidentiality/integrity/ava...

CVE-2005-2971

CVE-2005-2971 : Heap-based buffer overflow in the KWord RTF importer of KOffice 1.2.0–1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file. Root cause: buffer overflow in the importer. Affected software is the KWord component of KOffice; multiple advisories (e.g., Debian...

Fedora Core 3 : koffice-1.4.2-0.FC3.2 (2005-984)

Tue Oct 11 2005 Than Ngo 4:1.4.2-0.FC3.2 - remove security fix which is included in new 1.4.2 upstream - Thu Sep 29 2005 Than Ngo 4:1.4.2-0.FC3.1 - update to 1.4.2 - apply upstream patch to fix CVE-2005-2971 kword buffer overflow 169486 Note that Tenable Network Security has extracted the...