Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-001 applied. This update contains multiple security-related fixes for the following components : - Apache - ATS - ColorSync - CoreAudio - CoreMedia - CoreText - curl - Data Security - dovecot - filecmds ...

Debian Security Advisory DSA 2126-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 2126-1. OpenVAS Vulnerability Test $Id: deb21261.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2126-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

CVE-2010-3448

drivers/platform/x86/thinkpadacpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service system hang via a 1 read or 2 write operation...

CVE-2010-3448

CVE-2010-3448 affects the Linux kernel’s ThinkPad ThinkPad ACPI driver (drivers/platform/x86/thinkpad_acpi.c) on ThinkPad systems using X.Org prior to 2.6.34. The issue allows a local attacker to access and manipulate the video output control state without proper restriction, enabling a denial of...

[SECURITY] [DSA 2126-1] New Linux 2.6.26 packages fix several issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2126-1 [email protected] http://www.debian.org/security/ dann frazier November 26, 2010 http://www.debian.org/security/faq -...

Debian DSA-2126-1 : linux-2.6 - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2963 Kees Cook discovered an issue in the v4l 32-bit...

[SECURITY] [DSA 2126-1] New Linux 2.6.26 packages fix several issues

---------------------------------------------------------------------- Debian Security Advisory DSA-2126-1 [email protected] http://www.debian.org/security/ dann frazier November 26, 2010 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-2126-1 linux-2.6 - several issues

Bulletin has no description...

CVE-2009-3448

CVE-2009-3448 affects BakBone NetVault Backup 8.22 Build 29 (npvmgr.exe). A remote attacker can cause a denial-of-service (daemon crash) by sending a packet to either TCP or UDP port 20031 containing a large value in an unspecified size field, which is not properly handled in a malloc operation. ...

CVE-2008-3448

CVE-2008-3448 describes a cross-site scripting (XSS) vulnerability in the web application feature: index.php in the product “csphonebook 1.02” from common solutions . The issue arises when an attacker supplies a crafted value in the letter parameter, allowing injection of arbitrary web script or ...

CVE-2008-3448

creationtimestamp| type| source ---|---|--- 2008-07-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32135...

CVE-2007-3448

CVE-2007-3448 describes a cross-site scripting vulnerability in BugMall Shopping Cart 2.5 and earlier. An attacker can inject arbitrary script via the msgs parameter in index.php. The NVD entry notes this affects 2.5 and earlier versions; 4.0.2 and other versions might also be affected. The CVSS ...

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

Microsoft Step-by-Step Interactive Training Buffer Overflow (MS07-005; CVE-2006-3448)

Step-by-Step Interactive Training is an engine for interactive training titles provided by Microsoft Press and other vendors. By using the Step-by-Step Interactive Training user interface Bookmark link files .CBO,.CBL,.CBM are created. These files allow easier access to a particular topic, and...

CVE-2006-3448

Microsoft Step-by-Step Interactive Training contains a buffer overflow vulnerability (CVE-2006-3448) in the bookmark link handling for .CBO, .CBL, or .CBM files. Exploitation requires a user to open a crafted bookmark file, potentially allowing remote code execution on affected Windows systems (W...

MS07-005: Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (923723)

The remote host is running a version of Microsoft Step-by-Step Interactive Training that contains a flaw that could lead to remote code execution. To exploit this flaw, an attacker would need to trick a user on the remote host into opening a malformed file with the affected application. Tenable...

CVE-2005-3448

Technical details for CVE-2005-3448 are not publicly available in the provided documents. Monitor for updates from Oracle advisories and vendor bulletins to learn affected versions, impact, and remediation.