Microsoft PowerPoint DLL Planting Code Execution (MS10-087; CVE-2010-3337)

Microsoft Office is an office suite of inter-related desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems. A memory corruption vulnerability has been identified in the way that Microsoft Office handles the loading of DLL files. This vulnerability...

Computer Associates Advantage Ingres 2.6 Denial Of Service

Exploit Title: Computer Associates Advantage Ingres 2.6 Denial of Service Vulnerabilities Date: 2010-08-14 Author: fdisk Version: 2.6 Tested on: Windows 2003 Server SP1 en CVE: CVE-2007-3334 - CVE-2007-3336 - CVE-2007-3337 - CVE-2007-3338 Notes: Fixed in the last version. please let me know if yo...

Computer Associates Advantage Ingres 2.6 Denial of Service

Exploit for windows platform in category dos / poc ========================================================== Computer Associates Advantage Ingres 2.6 Denial of Service ========================================================== Exploit Title: Computer Associates Advantage Ingres 2.6 Denial of...

CVE-2009-3337

SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...

CVE-2009-3337

CVE-2009-3337 affects the Serendipity S9Y Freetag plugin prior to version 3.09. The issue is an SQL injection in the serendipity_event_freetag component, exploitable by supplying a crafted value to a parameter associated with Meta keywords in a blog entry. Impact is the ability for remote attacke...

CVE-2009-3337

SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...

openSUSE Security Update : pdns (pdns-146)

This update of pdns offers better spoofing resistance by not ignoring invalid queries. CVE-2008-3337 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pdns-146. The text description of this plug...

Gentoo Security Advisory GLSA 200812-19 (pdns)

The remote host is missing updates announced in advisory GLSA 200812-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200812-19 (pdns)

The remote host is missing updates announced in advisory GLSA 200812-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200510-24 (Mantis)

The remote host is missing updates announced in advisory GLSA 200510-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE 10 Security Update : pdns (pdns-5510)

This update of pdns offers better spoofing resistance by not ignoring invalid queries. CVE-2008-3337 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pdns-5510. The text description of this...

PowerDNS Authoritative Server Malformed Query Cache Poisoning Weakness

The remote DNS drops malformed queries. If it is not just a resolver and serves a domain name, this may help poisoning the cache of other DNS resolvers. PoweDNS 2.9.21 and earlier are known to exhibit this behavior. Note that this does not mean that this server would be vulnerable to cache...

[SECURITY] [DSA 1627-1] New PowerDNS packages reduce DNS spoofing risk

------------------------------------------------------------------------ Debian Security Advisory DSA-1628-1 [email protected] http://www.debian.org/security/ Florian Weimer August 10, 2008 http://www.debian.org/security/faq -...

DSA-1628-1 pdns - DNS spoofing

Bulletin has no description...

CVE-2008-3337

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217...

CVE-2008-3337

Technical details for CVE-2008-3337 are not publicly available in the provided documents. Monitor for updates; no confirmed affected products, root cause, or fixes are described here.

Fedora 9 : pdns-2.9.21.1-1.fc9 (2008-7048)

Wed Aug 6 2008 Ruben Kerkhof 2.9.21.1-1 - CVE-2008-3337 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 8 : pdns-2.9.21.1-1.fc8 (2008-7083)

Wed Aug 6 2008 Ruben Kerkhof 2.9.21.1-1 - CVE-2008-3337 - Sat Feb 9 2008 Ruben Kerkhof 2.9.21-4 - GCC 4.3 fixes - Wed Dec 5 2007 Ruben Kerkhof 2.9.21-3 - Rebuild to pick up new openldap Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

CVE-2007-3337

CVE-2007-3337 concerns the Ingres database server (2006 9.0.4 and earlier) used in multiple CA products. A local user can abuse the setuid root binary “wakeup” by creating a symbolic link to the file alarmwkp.def, causing the binary to truncate arbitrary files in the current directory. The issue ...

CVE-2006-3337

CVE-2006-3337 - affected product: cPanel 10.8.2-CURRENT 118 and earlier. Vulnerability type: Cross-site scripting (XSS) in frontend/x/files/select.html. Root cause / impact (as stated): allows remote attackers to inject arbitrary web script or HTML via the file parameter. This corresponds to netw...