CVE-2012-3523

The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection"...

CVE-2012-3523

CVE-2012-3523 affects nnrpd (INN) prior to 2.5.3, where STARTTLS does not properly restrict I/O buffering. This enables MITM attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is established (plaintext command injection), related to CVE...

CVE-2012-3523

The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection"...

Mandriva Linux Security Advisory : inn (MDVSA-2012:156)

A security issue was identified and fixed in ISC INN : The STARTTLS implementation in INN's NNTP server for readers, nnrpd, before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command tha...

Mandriva Update for inn MDVSA-2012:156 (inn)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 10 Security Update : inn (ZYPP Patch Number 8276)

A STARTTLS injection issue has been fixed in inn. CVE-2012-3523 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid62061;...

CVE-2011-3523

Technical details for CVE-2011-3523 are not provided in the supplied documents. No clear affected components, impact, or fixes are disclosed here. Monitor official advisories for updates.

CVE-2011-3523

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-2237...

CVE-2010-3523

CVE-2010-3523 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools components in PeopleSoft and JDEdwards Suite, specifically versions 8.49.28 and 8.50.12. The entry describes an unspecified vulnerability in the PeopleTools component that allows remote attackers to affect integrity via un...

CVE-2009-3523

creationtimestamp| type| source ---|---|--- 2010-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12406...

avast! Professional Edition < 4.8.1356 Multiple Vulnerabilities

The remote Windows host is running avast! Professional Edition. The installed version of avast! Professional Edition is potentially affected by multiple issues : - A local privilege escalation vulnerability because the 'avast4.ini' file is created with insecure permissions on setup. CVE-2009-3524...

CVE-2009-3523

CVE-2009-3523 concerns an interaction with the driver aavmKer4.sys in Avast! for Windows prior to 4.8.1356, where input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034 is not properly validated. This leads to memory corruption and enables local privilege escalation via crafted IOCTL requests that tar...

Debian Security Advisory DSA 891-1 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory DSA 891-1. Kevin Finisterre discovered a format string vulnerability in gpsdrive, a car navigation system, that can lead to the execution of arbitrary code. The old stable distribution woody does not contain gpsdrive packages...

CVE-2007-3523

CVE-2007-3523 affects XCMS 1.1 in the Module/Galerie.php file, allowing directory traversal to include and execute arbitrary local files via a .. in the Ent or Lang parameter. This is a remote code exposure/fileread issue (no details on patches in the provided docs). The vulnerability enables an ...

CVE-2006-3523

The vulnerability CVE-2006-3523 affects Clearswift MIMEsweeper for Web prior to 5.1.15 Hotfix. A remote attacker can cause a denial of service by sending an encrypted archived .RAR file that triggers a scan error, causing the Web Policy Engine service to terminate. Affected products: Clearswift M...

[SECURITY] [DSA 891-1] New gpsdrive packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 891-1 [email protected] http://www.debian.org/security/ Martin Schulze November 9th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3523

Format string vulnerability in friendsd2 in GpsDrive allows remote attackers to execute arbitrary code via the dir direction field...

CVE-2005-3523

CVE-2005-3523 corresponds to a format-string vulnerability in gpsdrive (also referred to as gpsdrive/friendsd2) that allows remote code execution via the dir (direction) field. Publicly documented advisories confirm a remote vulnerability in gpsdrive and note that the issue was fixed in Debian wi...