5079 matches found
MDVA-2009:014 : drak3d
This update fixes several minor issues with drak3: - allow to show only installed WMs in interactive mode for finish-install - add --force option to force 3D desktop enabling even if not supported - check if system supports command line options before applying them - blacklist geode driver - do n...
Immunity Canvas: CLOUDBURST
Name| CLOUDBURST ---|--- CVE| CVE-2009-1244 Exploit Pack| CANVAS Description| CLOUDBURST VMware Workstation Guest Escape Notes| CVE Name: CVE-2009-1244 VENDOR: VMware Notes: The exploit currently only supports a Windows Guest in a Windows Host, with "Accelerate 3D Graphics" enabled default on new...
[SECURITY] Fedora 10 Update: compiz-fusion-0.7.8-4.fc10
The Compiz Fusion Project brings 3D desktop visual effects that improve usability of the X Window System and provide increased productivity though plugins and themes contributed by the community giving a rich desktop experience...
Fedora Update for blender FEDORA-2008-3862
Check for the Version of blender OpenVAS Vulnerability Test Fedora Update for blender FEDORA-2008-3862 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for blender FEDORA-2008-10448
Check for the Version of blender OpenVAS Vulnerability Test Fedora Update for blender FEDORA-2008-10448 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Irrlicht B3D加载器缓冲区溢出漏洞
BUGTRAQ ID: 32907 CVECAN ID: CVE-2008-5876 Irrlicht是用C++编写的开源高效3D引擎。 Irrlicht的B3D加载器中存在缓冲区溢出漏洞。如果用户受骗打开了包含有特制光照网格的.irr文件的话，就可能触发这个溢出，导致拒绝服务或执行任意指令。 Nikolaus Gebhardt Irrlicht 1.5 厂商补丁： Nikolaus Gebhardt ----------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Banner Exchange Java - Authentication Bypass
☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرØمن الرØيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.adserversolutions.com Software: Banne...
[SECURITY] Fedora 10 Update: blender-2.48a-4.fc10
Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...
eWebquiz v 8 (Auth Bypass) Remote SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرØمن الرØيم------------------------------ وما أوتيتم من العلم الا قليلا -------------------------------صدق الله العظيم------------------------------- Tybe:Auth Bypass...
Active Web Mail 4 - Blind SQL Injection
Active Web Mail 4 - Blind SQL Injection ----------------------------بسم الله الرØمن الرØيم------------------------------ Tybe:emails.aspx TabOpenQuickTab1 Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Web Mail v 4 author: Ñ3d D3v!L Date:...
[SECURITY] Fedora 8 Update: blender-2.48a-4.fc8
Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...
[SECURITY] Fedora 9 Update: blender-2.48a-4.fc9
Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...
Gentoo Security Advisory GLSA 200404-12 (scorched3d)
The remote host is missing updates announced in advisory GLSA 200404-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200511-12 (scorched3d)
The remote host is missing updates announced in advisory GLSA 200511-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200511-12 (scorched3d)
The remote host is missing updates announced in advisory GLSA 200511-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-2822
The CVE-2008-2822 issue affects the 3D-FTP Client (version around 8.01/8.0 build 1). The vulnerability is a directory-traversal flaw triggered by a ".." in responses to LIST/MLSD, allowing remote FTP servers to create or overwrite arbitrary files outside the client directory. Attack impact includ...
CVE-2008-2822: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 8.0 build 1 allow remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a 1 LIST or 2 MLSD command...
3D-FTP Multiple Directory Traversal Vulnerabilities
The remote host has the 3D-FTP FTP client installed. The installed version of 3D-FTP is affected by multiple directory traversal vulnerabilities. By prefixing '../' to filenames in response to 'LIST' and 'MLSD' commands, it may be possible for an attacker to write arbitrary files outside the...
3D-FTP 8.01 - 'LIST' / 'MLSD' Directory Traversal
source: https://www.securityfocus.com/bid/29749/info 3D-FTP is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues allows an attacker to write arbitrary files to locations outside of the FTP client's...
Blender创建不安全临时文件漏洞
BUGTRAQ ID: 28936 CVECAN ID: CVE-2008-1103 Blender是一款免费的3D建模软件。 Blender在终止的时候创建了/tmp/quit.blend文件，而该文件使用了容易猜测的文件名并使用不安全的文件权限存储临时渲染帧，在自动保存文件时也使用了不安全的文件权限。本地攻击者可以通过符号链接攻击以运行Blender用户的权限覆盖任意文件，或泄露敏感信息。 Blender Foundation Blender 2.45 Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200805-12）以及相应补丁:...