Linux Kernel 'CIFSFindNext()'函数拒绝服务漏洞

Bugtraq ID: 49295 CVE ID：CVE-2011-3191 Linux是一款开放源代码的操作系统。 "CIFSFindNext"函数fs/cifs/cifssmb.c存在一个符号相关错误，发送特制的CIFS消息可使客户端崩溃。 要成功利用漏洞需要使用恶意服务器。 Linux kernel 2.6.x 厂商解决方案 目前没有详细解决方案提供： http://www.linux.org/...

Adobe Captivate Insecure Library Loading Vulnerability

This host is installed with Adobe Captivate and is prone to Insecure Library Loading vulnerability. OpenVAS Vulnerability Test $Id: gbadobecaptivateinsecurelibloadvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe Captivate Insecure Library Loading Vulnerability Authors: Sooraj KS Copyright:...

CVE-2010-3191

CVE-2010-3191 affects Adobe Captivate 5.0.0.596 (and possibly other versions). The vulnerability is an Insecure Library Loading/DLL hijacking issue caused by an untrusted search path: a Trojan dwmapi.dll placed in the same folder as a .cptx file can be loaded, enabling local users or remote attac...

SLES9: Security update for cups

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cups For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012225 within the SuSE...

SLES9: Security update for cups

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cups For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012225 within the SuSE...

CVE-2009-3191

CVE-2009-3191 affects PAD Site Scripts 3.6. Multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the cat parameter to rss.php and opml.php. Exploitation is remote and demonstrated in public advisories (e.g., Exploit-DB). The NVD ass...

CVE-2009-3191

creationtimestamp| type| source ---|---|--- 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9531...

Gentoo Security Advisory GLSA 200512-08 (xpdf, gpdf, poppler,cups)

The remote host is missing updates announced in advisory GLSA 200512-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200601-02 (kdegraphics, kpdf, koffice, kword)

The remote host is missing updates announced in advisory GLSA 200601-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3191

CVE-2008-3191 affects mForum 0.1a. Multiple SQL injection vulnerabilities exist in usercp.php when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL via the edit_profile fields (City, Interest, Email, Icq, msn, Yahoo Messenger). The root cause is improper handling of...

CVE-2008-3191

creationtimestamp| type| source ---|---|--- 2008-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6068...

Debian Security Advisory DSA 940-1 (gpdf)

The remote host is missing an update to gpdf announced via advisory DSA 940-1. infamous41md and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in gpdf, the GNOME version of the Portable Document Format viewer, and...

CVE-2007-3191

The vulnerability CVE-2007-3191 affects Just For Fun Network Management System (JFFNMS) version 0.8.3, where a direct request to admin/adm/test.php triggers phpinfo and exposes configuration information. Public sources among connected documents cite Debian’s DSA-1374-1 and the related Nessus/Open...

Debian DSA-931-1 : xpdf - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, that can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-937-1 : tetex-bin - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in tetex-bin, the binary files of teTeX, and which can lead to a denial of service by crashing the application or possibly to the execution of...

Debian DSA-940-1 : gpdf - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in gpdf, the GNOME version of the Portable Document Format viewer, and which can lead to a denial of service by crashing the application or possibly...

CentOS 4 : kdegraphics (CESA-2005:868)

Updated kdegraphics packages that resolve several security issues in kpdf are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment including kpdf, a pdf file...

CentOS 4 : gpdf (CESA-2005:867)

An updated gpdf package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The gpdf package is a GNOME based viewer for Portable Document Format PDF files. Severa...

CentOS 3 / 4 : xpdf (CESA-2005:840)

An updated xpdf package that fixes several security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 20 Dec 2005 The initial fix for these issues was incomplete. The packages have been updated with a more comple...

CentOS 3 / 4 : tetex (CESA-2006:0160)

Updated tetex packages that fix several integer overflows are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input and creates a...