AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 Buffer Overflow

$Id: rpccmsdopcode21.rb 8426 2010-02-09 04:15:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Immunity Canvas: AIXCMSD

Name| aixcmsd ---|--- CVE| CVE-2009-3699 Exploit Pack| CANVAS Description| rpc.cmsd remote root exploit AIX Notes| CVE Name: CVE-2009-3699 Versions Affected: AIX 5.x / AIX 6.x Notes: Repeatability: Unlimited OSVBD: 58726 References:...

CVE-2009-3699

CVE-2009-3699 – AIX rpc.cmsd opcode 21 buffer overflow AIX libcsa.a (calendar daemon library) is vulnerable to a stack-based buffer overflow when handling opcode 21 parameters in rpc.cmsd. Affected products include IBM AIX 5.x up to 5.3.10 and 6.x up to 6.1.3, and VIOS 2.1 and earlier. The flaw a...

Mandriva Linux Security Advisory : amarok (MDVSA-2008:172)

A flaw in Amarok prior to 1.4.10 would allow local users to overwrite arbitrary files via a symlink attack on a temporary file that Amarok created with a predictable name CVE-2008-3699. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security,...

Mandriva Update for amarok MDVSA-2008:172 (amarok)

Check for the Version of amarok OpenVAS Vulnerability Test Mandriva Update for amarok MDVSA-2008:172 amarok Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Ubuntu Update for amarok vulnerability USN-657-1

Ubuntu Update for Linux kernel vulnerabilities USN-657-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6571.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for amarok vulnerability USN-657-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Fedora Update for amarok FEDORA-2008-7739

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

USN-657-1: Amarok vulnerability

Dwayne Litzenberger discovered that Amarok created temporary files in an insecure way. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program. CVE-2008-3699...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-3699. Reason: This candidate is a duplicate of CVE-2008-3699. Notes: All CVE users should reference CVE-2008-3699 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2008-4430

CVE-2008-4430 is rejected; refer to CVE-2008-3699.

Gentoo Security Advisory GLSA 200809-08 (amarok)

The remote host is missing updates announced in advisory GLSA 200809-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 8 : amarok-1.4.10-1.fc8 (2008-7719)

Amarok 1.4.10 has been released to fix a security problem. For more information please see http://amarok.kde.org/en/node/535/ Please update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[slackware-security] amarok

New Amarok packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. In addition, new supporting libgpod packages are available for Slackware 11.0 and 12.0, since a newer version of libgpod than shipped with these releases is required to run Amarok version 1.4.10...

[ MDVSA-2008:172 ] amarok

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:172 http://www.mandriva.com/security/ Package : amarok Date : August 15, 2008 Affected: 2008.0, 2008.1 Problem Description: A flaw in Amarok prior to 1.4.10 would allow local users to overwrite arbitrary fil...

CVE-2008-3699

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the albuminfo.xml temporary file...

CVE-2008-3699

CVE-2008-3699 affects Amarok up to version 1.4.10, where MagnatuneBrowser::listDownloadComplete in magnatunebrowser.cpp could allow a local user to overwrite arbitrary files via a symlink attack on a temporary album_info.xml file. Public iterations in connected advisories confirm the issue and re...

CVE-2007-3699

CVE-2007-3699 affects the Decomposer component in multiple Symantec products, enabling remote attackers to trigger a denial of service (infinite loop) by crafting the PACK_SIZE field in a RAR header. Connected Nessus entries reiterate this as part of “Symantec Mail Security Engine/Scanner” vulner...

CVE-2007-3801

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-3699. Reason: This candidate is a duplicate of CVE-2007-3699. Notes: All CVE users should reference CVE-2007-3699 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-3699. Reason: This candidate is a duplicate of CVE-2007-3699. Notes: All CVE users should reference CVE-2007-3699 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-3801

CVE-2007-3801 is a duplicate of CVE-2007-3699; connected records confirm CVE-2007-3699 details a denial-of-service via PACK_SIZE in RAR headers and a heap overflow in CAB processing within Symantec Decomposer/Scan Engine components. Affected products include Symantec AntiVirus and Symantec Mail S...