Oracle Linux 7 : resteasy-base (ELSA-2014-1011)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1011 advisory. 2.3.5-3 - Resolves: rhbz1121917 - CVE-2014-3490: XXE via parameter entities Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : wget (ELSA-2009-1549)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1549 advisory. 1.11.4-3 - add fix for CVE-2009-3490, incorrect verification of SSL certificate with NUL in name Tenable has extracted the preceding description block directly...

Scientific Linux Security Update : wget on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name Daniel Stenberg reported that Wget is affected by the previously published 'null prefix attack', caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted...

Measuresoft ScadaPro xf Command Execution (CVE-2011-3490)

A command execution vulnerability has been reported in Measuresoft ScadaPro...

Measuresoft ScadaPro xf Command Execution

Added: 11/28/2011 CVE: CVE-2011-3490 BID: 49613 OSVDB: 75490 Background ScadaPro is Real Time Data Acquisition software for Microsoft Windows. Problem ScadaPro version 4.0.0 and prior runs a legacy network service on UDP port 11234. This service contains multiple stack overflow and remote command...

CVE-2011-3490

CVE-2011-3490 affects Measuresoft ScadaPro 4.0.0 and earlier, where the legacy network service on UDP port 11234 suffers multiple stack-based buffer overflows in service.exe. An attacker could remotely crash the server and potentially execute arbitrary code via a long command sent to port 11234 (...

CVE-2011-3490

creationtimestamp| type| source ---|---|--- 2011-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17848...

CentOS Update for wget CESA-2009:1549 centos4 i386

Check for the Version of wget OpenVAS Vulnerability Test CentOS Update for wget CESA-2009:1549 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for wget CESA-2009:1549 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for wget CESA-2009:1549 centos3 i386

Check for the Version of wget OpenVAS Vulnerability Test CentOS Update for wget CESA-2009:1549 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for wget CESA-2009:1549 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for wget CESA-2009:1549 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreePBX Recording Interface File Upload Code Execution (CVE-2010-3490)

FreePBX is an open source software implementation of a telephone Private Branch eXchange PBX. It allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. A code execution vulnerability exists i...

CVE-2010-3490

CVE-2010-3490 affects FreePBX

TWSL2010-005: FreePBX recordings interface allows remote code execution

Trustwave's SpiderLabs Security Advisory TWSL2010-005: FreePBX recordings interface allows remote code execution https://www.trustwave.com/spiderlabs/advisories/TWSL2010-005.txt Published: 2010-09-23 Version: 1.0 Vendor: FreePBX http://www.freepbx.org/ Product: FreePBX and VOIP solutions...

CVE-2010-3490

creationtimestamp| type| source ---|---|--- 2010-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15098...

FreePBX 2.8.0 - Recordings Interface Allows Remote Code Execution

Trustwave's SpiderLabs Security Advisory TWSL2010-005: FreePBX recordings interface allows remote code execution https://www.trustwave.com/spiderlabs/advisories/TWSL2010-005.txt Published: 2010-09-23 Version: 1.0 Vendor: FreePBX http://www.freepbx.org/ Product: FreePBX and VOIP solutions...

Important: Red Hat Security Advisory: rhev-hypervisor security and bug fix update

An updated rhev-hypervisor package that fixes security issues and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The rhev-hypervisor package provides a Red Hat Enterprise Virtualization RHEV Hypervisor ISO disk...

Fedora Core 10 FEDORA-2009-11739 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11739. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 12 FEDORA-2009-11836 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11836. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...