252 matches found
CVE-2012-3200
The CVE-2012-3200 entry concerns the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1, with an unspecified vulnerability that allows remote authenticated users to affect confidentiality, related to ROLESPRV. Connected sources corroborate a vendor patching context...
RedHat Update for rsyslog RHSA-2011:1247-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Ubuntu 11.04 : rsyslog vulnerability (USN-1224-1)
It was discovered that rsyslog had an off-by-two error when parsing legacy syslog messages. An attacker could potentially exploit this to cause a denial of service via application crash. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...
Fedora Update for rsyslog FEDORA-2011-12616
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 15 : rsyslog-5.8.5-1.fc15 (2011-12616)
new upstream version 5.8.5 which fixes CVE-2011-3200 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for rsyslog FEDORA-2011-12282
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for rsyslog FEDORA-2011-12282
Check for the Version of rsyslog OpenVAS Vulnerability Test Fedora Update for rsyslog FEDORA-2011-12282 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora 14 : rsyslog-4.6.3-3.fc14 (2011-12282)
updated package which fixes CVE-2011-3200 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
Fedora 16 : rsyslog-5.8.5-1.fc16 (2011-12250)
new upstream version 5.8.5 which fixes CVE-2011-3200 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[ MDVSA-2011:134 ] rsyslog
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:134 http://www.mandriva.com/security/ Package : rsyslog Date : September 9, 2011 Affected: 2010.1 Problem Description: A vulnerability was discovered and corrected in rsyslog: Stack-based buffer overflow in...
Mandriva Update for rsyslog MDVSA-2011:134 (rsyslog)
Check for the Version of rsyslog OpenVAS Vulnerability Test Mandriva Update for rsyslog MDVSA-2011:134 rsyslog Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CVE-2011-3200
Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service application exit via a long TAG in a legacy syslog message...
CVE-2011-3200
CVE-2011-3200 affects rsyslog rsyslogd where the parseLegacySyslogMsg function in tools/syslogd.c contains a stack-based buffer overflow. The vulnerability exists in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4, enabling a remote attacker to trigger an application exit (DoS) by sending a lo...
CVE-2011-3200
Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service application exit via a long TAG in a legacy syslog message...
rsyslog security update
4.6.2-3.el61.2 - add patch to resolve buffer overflow CVE-2011-3200 Resolves: 733647...
rsyslog Long Tag Off-By-Two DoS
This module triggers an off-by-two overflow in the rsyslog daemon. This flaw is unlikely to yield code execution but is effective at shutting down a remote log daemon. This bug was introduced in version 4.6.0 and corrected in 4.6.8/5.8.5. Compiler differences may prevent this bug from causing any...
CVE-2010-3200
Microsoft Word 2003 SP3 (MSO.dll) is affected by CVE-2010-3200 due to a null pointer dereference triggered by a crafted Word document, leading to a denial-of-service condition (multiple Word process crashes) as demonstrated by word_crash_11.8326.8324_poc.doc. Affected component is MSO.dll within ...
Access Point Web-browser Interface Vulnerability
The Cisco web-browser interface for Cisco access points and Cisco 3200 Series Wireless Mobile Interface Card WMIC, contains a vulnerability that could, under certain circumstances, remove the default security configuration from the managed access point and allow administrative access without...
CVE-2009-3200
The CVE-2009-3200 entry describes a vulnerability in QNAP TS-239 Pro and TS-639 Pro devices running firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815. An undocumented recovery key is created and stored in the ENCK variable in flash memory, allowing local users to bypass the passphrase and decrypt t...
