Debian: Security Advisory (DSA-3588-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-1532)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-3588

The CVE-2013-3588 entry concerns Zyxel P660 series devices where the web management interface is vulnerable to a denial of service caused by a flood of TCP SYN packets. Remote attackers can trigger a reboot, effectively taking the device offline via a network-based SYN flood. The NVD and CERT ref...

CVE-2011-3588

CVE-2011-3588 relates to the kexec-tools/ mkdumprd OpenSSH integration where the SSH option StrictHostKeyChecking is disabled in affected Red Hat kdump tooling (kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209). This enables a man-in-the-middle to spoof the kdump server and exfiltrate...

CVE-2011-3588

The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers...

Oracle Linux 5 : kexec-tools (ELSA-2012-0152)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-0152 advisory. 1.102pre-154.0.3 - mkdumprd.orig get packed, remove it. 1.102pre-154.0.2 - fix mounting root fs on labeled disk Maxim Uvarov orabug: 13709374...

RHEL 3 / 4 : flash-plugin (RHSA-2006:0674)

An updated Adobe Flash Player package that fixes security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe Flash Player browser plug-in. Security issues were...

Scientific Linux Security Update : kexec-tools on SL6.x i386/x86_64

Kexec allows for booting a Linux kernel from the context of an already running kernel. Kdump used the SSH Secure Shell 'StrictHostKeyChecking=no' option when dumping to SSH targets, causing the target kdump server's SSH host key not to be checked. This could make it easier for a man-in-the-middle...

RedHat Update for kexec-tools RHSA-2011:1532-03

Check for the Version of kexec-tools OpenVAS Vulnerability Test RedHat Update for kexec-tools RHSA-2011:1532-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RedHat Update for kexec-tools RHSA-2011:1532-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-3588

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the data parameter...

CVE-2012-3588

CVE-2012-3588 corresponds to a directory traversal vulnerability in the WordPress Newsletter plugin (version 1.5) where the preview.php script fails to sanitize the data parameter, allowing remote attackers to read arbitrary files using .. in the data parameter. Multiple sources (WPScan, Tenable/...

CVE-2012-3588

creationtimestamp| type| source ---|---|--- 2012-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19018...

RHEL 5 : kexec-tools (RHSA-2012:0152)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:0152 advisory. The kexec-tools package contains the /sbin/kexec binary and utilities that together form the user-space component of the kernel's kexec...

Linux系统kdump和mkdumprd工具信息泄露漏洞

BUGTRAQ ID: 50416 CVE ID: CVE-2011-3588 Linux是自由电脑操作系统。 Linux系统的kdump和mkdumprd工具在实现上存在远程信息泄露漏洞，远程攻击者可利用此漏洞获取敏感信息 Linux kernel 3.x Linux kernel 2.6.x RedHat Enterprise Linux Workstation 6 RedHat Enterprise Linux Server 6 RedHat Enterprise Linux HPC Node 6 RedHat Enterprise Linux Desktop 6 厂商补丁：...

RHEL 6 : kexec-tools (RHSA-2011:1532)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1532 advisory. Kexec allows for booting a Linux kernel from the context of an already running kernel. Kdump used the SSH Secure Shell...

CVE-2010-3588

Technical details for CVE-2010-3588 are not provided in the connected documents. Public information about affected products/versions, root cause, or fixes is unavailable here. Monitor for updates.

KLA10094 DoS vulnerabilities in CA products

An unspecified vulnerability was found in CA products. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited from the network at a point related to arclib via a specially designed RAR archive. Original...

CVE-2009-3588

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise formerly eTrust Antivirus 7.1 through r8.1; Anti-Virus 2007 v8 through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 v3 through Plus 2009; and other CA products allows...

CVE-2009-3588

CVE-2009-3588 (and 3587) describe a DoS vulnerability in CA’s arclib component used by CA Anti-Virus for Enterprise and related CA products. A crafted RAR archive can trigger stack corruption (CVE-3588) and heap corruption (CVE-3587); CVE-3587 also notes possible arbitrary-code execution. Affecte...