CVE-2016-3733

CVE-2016-3733 affects Moodle versions: 3.0–3.0.3, 2.9–2.9.5, 2.8–2.8.11, 2.7–2.7.13, and earlier. Root cause: the Moodle “restore teacher” feature allows remote authenticated users to overwrite the course idnumber. Impact: enables modification of a course identifier by an authenticated actor. Exp...

CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

OpenSSL Encrypt-Then-Mac Renegotiation Denial of Service (CVE-2017-3733)

A denial of service vulnerability has been reported in OpenSSL. This vulnerability is due to improper handling of the Encrypt-Then-Mac extension during renegotiation. A remote attacker could exploit this vulnerability in an OpenSSL client or server application by sending crafted packets during...

OpenSSL 1.1.0 < 1.1.0e Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.1.0e. It is, therefore, affected by a vulnerability as referenced in the 1.1.0e advisory. - During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake or vice-versa...

OpenSSL Update Fixes High Severity DoS Vulnerability

The OpenSSL Software Foundation released an update to the OpenSSL crypto library that patches a vulnerability rated high severity that could allow a remote attacker to cause a denial-of-service condition. OpenSSL released the version 1.1.0e update that fixes flaws found in OpenSSL 1.1.0, accordin...

FreeBSD : openssl -- crash on handshake (1a802ba9-f444-11e6-9940-b499baebfeaf)

The OpenSSL project reports : Severity: High During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake or vice-versa then this can cause OpenSSL to crash dependent on ciphersuite. Both clients and servers are affected. This issue...

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: January and February 2017

On January 26, 2017, the OpenSSL Software Foundation released a security advisory that included three new vulnerabilities. The foundation also released one vulnerability that was already disclosed in the OpenSSL advisory for November 2016 and included in the Cisco Security Advisory Multiple...

FreeBSD : moodle -- multiple vulnerabilities (8656cf5f-4170-11e6-8dfe-002590263bf5)

Marina Glancy reports : - MSA-16-0013: Users are able to change profile fields that were locked by the administrator. - MSA-16-0015: Information disclosure of hidden forum names and sub-names. - MSA-16-0016: User can view badges of other users without proper permissions. - MSA-16-0017: Course...

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2007-0936)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Safari Multiple Vulnerabilities-01 (Sep 2015) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

CVE-2015-3733

CVE-2015-3733 is a WebKit memory-corruption/remote-code-execution issue present in WebKit as used by Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. The root cause is memory corruption triggered by complex crafted web content, which can lead to arbi...

CVE-2011-3733

Elgg 1.7.6 is affected by CVE-2011-3733. An information-disclosure flaw allows remote attackers to obtain sensitive data by making a direct request to certain PHP files, which reveals the installation path in an error message (as demonstrated by vendors/simpletest/test/visual_test.php and related...

CVE-2010-3733

The CVE-2010-3733 entry concerns IBM DB2 UDB 9.5 before FP6a. The Engine Utilities component uses world-writable permissions on sqllib/cfg/db2sprf, enabling local users to modify the file to gain privileges. Public references in the initial documents confirm this file-level permission issue; othe...

http-vmware-path-vuln NSE Script

Checks for a path-traversal vulnerability in VMWare ESX, ESXi, and Server CVE-2009-3733. The vulnerability was originally released by Justin Morehouse and Tony Flick, who presented at Shmoocon 2010 . Script Arguments slaxml.debug See the documentation for the slaxml library. http.host,...

VMware Serve Directory Traversal Vulnerability - Nov09 (Linux)

The host is installed with VMWare products and is prone to multiple vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareservdirtravvulnnov09lin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware Server Directory Traversal Vulnerability - Nov09 Linux Authors: Sharath S Copyright: Copyright c 2009...

DSquare Exploit Pack: D2SEC_VMWARE_DIRTRAV

Name| d2secvmwaredirtrav ---|--- CVE| CVE-2009-3733 Exploit Pack| D2ExploitPack Description| VmWare Server Directory Traversal Notes|...

DSquare Exploit Pack: D2SEC_VMWARE

Name| d2secvmware ---|--- CVE| CVE-2009-3733 Exploit Pack| D2ExploitPack Description| VmWare Server Directory Traversal Notes|...

CVE-2009-3733

CVE-2009-3733 describes a directory traversal vulnerability in VMware Server 1.x (before 1.0.10 build 203137) and 2.x (before 2.0.2 build 203138) on Linux, plus VMware ESXi 3.5 and VMware ESX 3.0.3/3.5. The issue allows remote attackers to read arbitrary files via unspecified vectors. Connected s...

VMSA-2009-0015 : VMware hosted products and ESX patches resolve two security issues

a. Mishandled exception on page faults An improper setting of the exception code on page faults may allow for local privilege escalation on the guest operating system. This vulnerability does not affect the host system. VMware would like to thank Tavis Ormandy and Julien Tinnes of the Google...