CVE-2012-3846

CVE-2012-3846 affects PHP-pastebin 2.1. The vulnerability is a cross-site scripting (XSS) flaw in index.php, exploitable via the title parameter to inject arbitrary web script or HTML. Several sources (NVD entry and related CVE records) confirm this issue. The provided documents do not specify th...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU02764)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2011-3846

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2011-3846

CVE-2011-3846 is a CSRF vulnerability in HP System Management Homepage (SMH) 6.2.2.7 that allows remote attackers to hijack administrator sessions and create new admin accounts. Affected component: SMH 6.2.2.7. Impact: partial confidentiality, integrity, and availability affected per CVSS2 vector...

cvs security update

1.11.23-11.el60.1 - Fix CVE-2010-3846 Resolves: 644813...

Security fix for the ALT Linux 5 package cvs version 1.11.23-alt3.M50P.1

Dec. 5, 2010 Andrey Cherepanov 1.11.23-alt3.M50P.1 - backport to p5 branch fixed CVE-2010-3846...

Security fix for the ALT Linux 5 package cvs version 1.11.23-alt4

Dec. 3, 2010 Dmitry V. Levin 1.11.23-alt4 - Applied upstream fix to an array index error, leading to a heap-based buffer overflow, found in the way CVS applied certain delta fragment changes from input files in the RCS Revision Control System file format. If an attacker in control of a CVS...

Fedora Update for cvs FEDORA-2010-16721

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cvs FEDORA-2010-16599

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cvs FEDORA-2010-16599

Check for the Version of cvs OpenVAS Vulnerability Test Fedora Update for cvs FEDORA-2010-16599 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2010-3846

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

CVE-2010-3846

Summary of CVE-2010-3846 and CVS 1.11.23 : The issue is an array index error in the apply_rcs_change function (rcs.c) that can trigger a heap-based buffer overflow in CVS 1.11.23. This creates a condition for local users to gain privileges when processing delta fragments in RCS files. The vulnera...

CVE-2010-3846

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

Fedora 14 : cvs-1.11.23-11.fc14 (2010-16721)

Thu Oct 21 2010 Petr Pisar - 1.11.23-11 - Fix CVE-2010-3846 bug 645386 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 12 : cvs-1.11.23-9.fc12 (2010-16599)

Thu Oct 21 2010 Petr Pisar - 1.11.23-9 - Fix CVE-2010-3846 bug 645386 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

HP-UX PHSS_40705 : s700_800 11.11 OV NNM7.01 Intermediate Patch 13

s700800 11.11 OV NNM7.01 Intermediate Patch 13 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. The vulnerability could be exploited remotely to execute arbitrary code. HPSBMA02424...

HP-UX PHSS_40375 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 25

s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 25 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerabilities have been identified with the Java Runtime Environment JRE and Java Developer Kit JDK delivered with HP OpenView Network Node Manager OV NNM...

CVE-2009-3846

HP OpenView Network Node Manager (NNM) vulnerable in OV NNM 7.01, 7.51, and 7.53 due to multiple heap-based overflow flaws in ovlogin.exe when processing userid and passwd parameters in HTTP requests. Remote attackers can potentially execute arbitrary code (often with SYSTEM privileges) by sendin...

[security bulletin] HPSBMA02483 SSRT090257 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01950877 Version: 1 HPSBMA02483 SSRT090257 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...

TPTI-09-08: HP OpenView NNM ovlogin.exe CGI userid/passwd Heap Overflow Vulnerability

TPTI-09-08: HP OpenView NNM ovlogin.exe CGI userid/passwd Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-09-08 December 9, 2009 -- CVE ID: CVE-2009-3846 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Network Node Manager --...