CVE-2015-3435

CVE-2015-3435 affects Samsung Security Manager (SSM) prior to 1.31. The vulnerability allows remote attackers to upload a file via HTTP PUT or HTTP MOVE, leading to arbitrary code execution on the server. Multiple sources describe the impact as remote code execution with SYSTEM privileges, effect...

CVE-2015-3435

Samsung Security Manager SSM before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP 1 PUT or 2 MOVE request...

CVE-2013-3435

Cisco Unified IP Conference Station 7937G is affected by CVE-2013-3435, where a remote unauthenticated attacker can cause a DoS (networking outage) by sending a high rate of TCP packets. The root cause relates to resource constraints in processing network traffic. Impact is a device-wide DoS unti...

Oracle Linux 5 : pam (ELSA-2010-0819)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0819 advisory. - fix insecure dropping of priviledges in pamxauth and pammail - CVE-2010-3316 637898, CVE-2010-3435 641335 Tenable has extracted the preceding...

[SECURITY] [DSA 2539-1] zabbix security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2539-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 06, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2539-1] zabbix security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2539-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 06, 2012 http://www.debian.org/security/faq -...

Fedora Update for zabbix FEDORA-2012-12488

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for zabbix FEDORA-2012-12496

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : zabbix-1.8.15-1.fc16 (2012-12488)

Release notes: http://www.zabbix.com/rn1.8.15.php Amongst others : - Solves SQL injection vulnerability CVE-2012-3435 - Removes useless backup files from the frontend Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...

Fedora 17 : zabbix-1.8.15-1.fc17 (2012-12496)

Release notes: http://www.zabbix.com/rn1.8.15.php Amongst others : - Solves SQL injection vulnerability CVE-2012-3435 - Removes useless backup files from the frontend Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...

CVE-2012-3435

CVE-2012-3435 is a SQL injection in Zabbix frontends/php/popup_bitem.php via the itemid parameter. Affected: Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1. Root cause: unsanitized input used in SQL queries, enabling remote arbitrary SQL commands. Impact: remote attacker could manipulate q...

Scientific Linux Security Update : pam on SL6.x i386/x86_64

It was discovered that the pamnamespace module executed the external script namespace.init with an unchanged environment inherited from an application calling PAM. In cases where such an environment was untrusted for example, when pamnamespace was configured for setuid applications such as su or...

Scientific Linux Security Update : pam on SL5.x i386/x86_64

It was discovered that the pamnamespace module executed the external script namespace.init with an unchanged environment inherited from an application calling PAM. In cases where such an environment was untrusted for example, when pamnamespace was configured for setuid applications such as su or...

CVE-2012-3435

creationtimestamp| type| source ---|---|--- 2012-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20087...

RKD Software ActiveX Control Remote Stack Buffer Overflow (CVE-2007-3435)

A Stack buffer overflow vulnerability has been reported in RKD Software Barcode Application. The vulnerability is due to a boundary error within the ABarCode ActiveX control while handling a certain method. A remote attacker could exploit this vulnerability by enticing a user to open a specially...

Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

DSquare Exploit Pack: D2SEC_OSX_CVE_2011_3435

Name| d2secOSXCVE20113435 ---|--- CVE| CVE-2011-3435 Exploit Pack| D2ExploitPack Description| d2secOSXCVE-2011-3435 Notes|...

CVE-2011-3435

CVE-2011-3435 affects Open Directory on OS X Lion (10.7) and Lion Server 10.7.x. Root cause: an access-control issue allowing a local user to read other users’ password data via unspecified vectors. Public details come from Apple’s advisories and vulnerability aggregations (Open Directory entry r...

Ubuntu: Security Advisory (USN-1140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMSA-2011-0004 : VMware ESX/ESXi SLPD denial of service vulnerability and ESX third-party updates for Service Console packages bind, pam, and rpm.

a. Service Location Protocol daemon DoS This patch fixes a denial-of-service vulnerability in the Service Location Protocol daemon SLPD. Exploitation of this vulnerability could cause SLPD to consume significant CPU resources. VMware would like to thank Nicolas Gregoire and US CERT for reporting...