MS Exchange Server Remote Code Execution Vulnerabilities (2876063)

This host is missing a critical security update according to Microsoft Bulletin MS13-061. OpenVAS Vulnerability Test $Id: secpodms13-061.nasl 5339 2017-02-18 16:28:22Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2876063 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...

Microsoft Exchange Server Remote Code Execution Vulnerabilities (2876063)

This host is missing a critical security update according to Microsoft Bulletin MS13-061. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Joomla! 2.5.x < 2.5.14 / 3.x < 3.1.5 .php. File Upload RCE

According to its self-reported version number, the Joomla! installation running on the remote web server is 2.5.x prior to 2.5.14 or 3.x prior to 3.1.5. It is, therefore, affected by a remote code execution vulnerability due to a failure by the administrator/components/commedia/helpers/media.php...

CVE-2013-4124

CVE-2013-4124 (Samba) is an integer overflow in read_nttrans_ea_list (nttrans.c) that can be triggered by a malformed EA list, potentially leading to memory consumption DoS. Affected are Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8. The initial entry specifies the vulnerabil...

CVE-2013-4124

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

Updated apache packages fix security vulnerabilities

Updated apache packages fix security vulnerabilities: moddav.c in the Apache HTTP Server before 2.4.6 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service segmentation fault via a MERGE request in which the URI is configured for...

CVE-2013-2165

ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBo...

Updated squid packages fix security vulnerabilities

Due to incorrect data validation Squid is vulnerable to a buffer overflow attack when processing specially crafted HTTP requests. This problem allows any trusted client or client script who can generate HTTP requests to trigger a buffer overflow in Squid, resulting in a termination of the Squid...

JVN#38787103: JBoss RichFaces vulnerable to remote code execution

JBoss RichFaces is a framework for integrating Ajax into web applications. JBoss RichFaces applications contain a deserialization interface where end users may provide input. This interface may deserialize untrusted data, which may lead to arbitrary code execution. Impact When specially crafted...

Squid 3.x < 3.2.12 / 3.3.x < 3.3.7 idnsALookup HTTP Request DoS

Binary data 6931.prm...

Joomla Googlemaps Plugin XSS / XML Injection / Path Disclosure / DoS

The Joomla Googlemaps plugin suffers from cross site scripting, path disclosure, denial of service, and XML injection vulnerabilities. These are Denial of Service, XML Injection, Cross-Site Scripting and Full path disclosure vulnerabilities in Googlemaps plugin for Joomla. -----------------------...

HP-UX PHSS_43408 : HP-UX 11.31 OV NNM9.20 NNM 9.2x Patch 3

HP-UX 11.31 OV NNM9.20 NNM 9.2x Patch 3 : Apotential security vulnerability has been identified with HP Network Node Manager I NNMi on HP-UX, Linux, Solaris, and Windows. The vulnerability could be remotely exploited resulting in unauthorized access. References: CVE-2013-2351 SSRT101012,...

Fedora 19 : gallery3-3.0.9-1.fc19 (2013-12384)

Fixes for CVE-2013-2240, CVE-2013-2241. A security flaw was found in the way flowplayer SWF file handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to this...

Fedora 18 : gallery3-3.0.9-1.fc18 (2013-12424)

Fixes for CVE-2013-2240, CVE-2013-2241. A security flaw was found in the way flowplayer SWF file handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to this...

Fedora 17 : gallery3-3.0.9-1.fc17 (2013-12441)

Fixes for CVE-2013-2240, CVE-2013-2241. A security flaw was found in the way flowplayer SWF file handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to this...

DSA-2722-1 openjdk-7 - several

Bulletin has no description...

Oracle Linux 3 : tar (ELSA-2010-0142)

From Red Hat Security Advisory 2010:0142 : An updated tar package that fixes one security issue is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in on...

Oracle Linux 3 : rdesktop (ELSA-2008-0576)

From Red Hat Security Advisory 2008:0576 : Updated rdesktop packages that fix a security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft...

Oracle Linux 3 : python (ELSA-2009-1178)

From Red Hat Security Advisory 2009:1178 : Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive,...

Fedora 19 : gallery3-3.0.8-1.fc19 (2013-10032)

A security flaw was found in the way uploadify and flowplayer SWF files handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to these files certain URL...