356 matches found
SuSE 11.1 Security Update : aaa_base (SAT Patch Number 3910)
The following bug has been fixed : - The boot.localfs init script wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files. CVE-2011-0461 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
DSquare Exploit Pack: D2SEC_VTIGERCRM
Name| d2secvtigercrm ---|--- CVE| CVE-2010-3910 Exploit Pack| D2ExploitPack Description| vtiger CRM 5.2.0 Local File Include Vulnerability Notes|...
Java for Mac OS X 10.5 Update 7
The remote host is missing Java for Mac OS X 10.5 Update 7. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Mac OS X : Java for Mac OS X 10.6 Update 2
The remote Mac OS X host is running a version of Java for Mac OS X 10.6 that is missing Update 2. The remote version of this software contains several security vulnerabilities, including some that may allow untrusted Java applets to obtain elevated privileges and lead to execution of arbitrary co...
Oracle Java SE Multiple Vulnerabilities (March 2010 CPU)
The version of Oracle formerly Sun Java Runtime Environment JRE installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.226. Such versions are potentially affected by security issues in the following components : - ImageIO - Java 2D - JRE - Java Web Start, Java Plug-in -...
Dns2tcp远程缓冲区溢出漏洞
BUGTRAQ ID: 31080 CVE ID：CVE-2008-3910 CNCVE ID：CNCVE-20083910 Dns2tcp是一款允许在DNS报文中封装TCP会话的工具。 Dns2tcp存在多个缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意任意指令。 目前没有详细漏洞细节提供。 Herve Schauer Consultants HSC Dns2tcp 0.4 升级到最新版本： Herve Schauer Consultants HSC Dns2tcp 0.4 Herve Schauer Consultants HSC dns2tcp-0.4.1.tar.gz...
CVE-2008-3910
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...
CVE-2008-3910
CVE-2008-3910 affects dns2tcp before 0.4.1. The vulnerability arises in the handling of negative values in a certain length field passed to dns_simple_decode or dns_decode, allowing remote attackers to overwrite a buffer and cause unspecified other impact. The issue is described across multiple s...
CVE-2007-3910
Cross-site scripting XSS vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs...
CVE-2007-3910
Cross-site scripting XSS vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs...
CVE-2007-3910
Bandersnatch 0.4 is affected by an XSS vulnerability (CVE-2007-3910) where remote attackers can inject arbitrary JavaScript via a Jabber resource name (and possibly other data items) that are stored in conversation logs. Multiple sources in the connected set corroborate the issue and describe the...
CVE-2006-3910
Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service crash by calling the NewDefaultItem function of an OVCtl OVCtl.OVCtl.1 ActiveX object, which triggers a null dereference...
CVE-2006-3910
Summary: CVE-2006-3910 affects Internet Explorer 6 on Windows XP SP2 when Outlook is installed. The issue arises from calling the NewDefaultItem function of an OVCtl (OVCtl.OVCtl.1) ActiveX object, causing a null dereference and a remote denial of service (crash). Details provided by sources: The...
CVE-2005-3910
merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magicquotesgpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerability...
CVE-2005-3910
The CVE-2005-3910 entry affects Post Affiliate Pro (merchants/index.php) in version 2.0.4 and earlier. When magic_quotes_gpc is disabled, remote attackers can trigger a local file inclusion via the md parameter, likely due to a directory traversal vulnerability. Documented impact is arbitrary loc...
