Updated live, ffmpeg, mplayer, and vlc packages fix security vulnerabilities

A bug in the server implementation of RTSP-over-HTTP in live could allow a denial-of-service attack. A bug in the server implementation of RTSP-over-HTTP could allow a buffer overflow, which could result in the execution of arbitrary code when parsing a malformed RTSP stream CVE-2018-4013. The...

Debian: Security Advisory (DSA-4343-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Out-of-bounds Write in Live555 Live555_Media_Server

cve-2018-4013 cve-2018-4013 poc 简要复现https://doublemi...

CVE-2018-4013

CVE-2018-4013 affects the LIVE555 RTSP server library (liveMedia) version 0.92, where a vulnerability in the HTTP packet-parsing path can cause a stack-based buffer overflow leading to remote code execution. The root cause involves reading HTTP headers into stack buffers during RTSP-over-HTTP han...

Debian DSA-4013-1 : openjpeg2 - security update

Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution of arbitrary code if a malformed JPEG 2000 file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

CVE-2017-4013

Banner Disclosure in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to obtain product information via HTTP response header...

CVE-2017-4013

CVE-2017-4013 concerns the McAfee Network Data Loss Prevention (NDLP) server. The connected sources describe a banner/info-disclosure vulnerability in NDLP 9.3.x where remote attackers can obtain product information through HTTP response headers. No details about vulnerable subsystems, exact root...

CVE-2014-4013

SQL injection vulnerability in the Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4013

The CVE-2014-4013 entry describes a SQL injection vulnerability in the Policy Manager of Aruba Networks ClearPass. Affected products/versions include ClearPass 5.x, 6.0.x, 6.1.x up to 6.1.4.61696, 6.2.x up to 6.2.6.62196, and 6.3.x before 6.3.4. The issue allows remote authenticated users to exec...

CVE-2013-4013

CVE-2013-4013 affects IBM Maximo Asset Management and related Maximo offerings. Affects: Maximo Asset Management 6.2.x (6.2.0–6.2.8), 7.1.x (7.1.0–7.1.1.12), and 7.5 (before 7.5.0.2). Issue: information disclosure via unspecified vectors that allow remote attackers to obtain sensitive data. CVSS ...

CVE-2012-4013

CVE-2012-4013 affects the WebView component in Cybozu KUNAI Browser for Remote Service beta (Android). The vulnerability allows a crafted app to place JavaScript into a local file accessed via a file:// URL, enabling remote attackers to execute arbitrary JavaScript and potentially disclose sensit...

Apple Mac OS X PackageKit Format String Vulnerability

This host is missing an important security update according to Mac OS X 10.6.6 Update. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Hydra v6.2 with a password bruteforcing mode, xmpp and irc modules, MD5/SHA1/ Support !

Hydra v6.2 with a password bruteforcing mode, xmpp and irc modules, MD5/SHA1/ Support ! A very fast network logon cracker which support many different services. Have a look at the feature sets and services coverage page - including a speed comparison against ncrack and medusa! CHANGELOG for 6.2...

CVE-2010-4013

CVE-2010-4013 covers a format-string vulnerability in Apple Mac OS X 10.6.x before 10.6.6, when PackageKit processes distribution scripts during Software Update. The root cause is a format-string error in PackageKit, allowing an attacker to cause an arbitrary code execution or a denial of service...

Mac OS X 10.6.x < 10.6.6 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.6. Mac OS X 10.6.6 contains a security fix for the following product : - PackageKit C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include"compat.inc"; if description scriptid51423; scriptversion"1.11...

Debian DSA-1979-1 : lintian - multiple vulnerabilities

Multiple vulnerabilities have been discovered in lintian, a Debian package checker. The following Common Vulnerabilities and Exposures project ids have been assigned to identify them : - CVE-2009-4013: missing control files sanitation Control field names and values were not sanitised before using...

CVE-2009-4013

Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files or obtain sensitive information via vectors involving 1 control field names, 2 control field values, and 3 control file...

CVE-2009-4013

Multiple directory traversal vulnerabilities affect lintian across 1.23.x (up to 1.23.28), 1.24.x (up to 1.24.2.1), and 2.x before 2.3.2. The root cause involves unsanitized control field names/values and control files of patch systems, enabling remote attackers to overwrite arbitrary files or di...

Debian Lintian多个本地安全漏洞

Bugraq ID: 37975 CVE ID：CVE-2009-4013 CVE-2009-4014 CVE-2009-4015 Debian Lintian是一款软件包检查程序。 Debian Lintian存在多个安全漏洞，本地攻击者可以利用这些漏洞执行任意代码或者提升特权或获得敏感信息。 CVE-2009-4013：控制文件过滤缺失 CNCVE ID：CNCVE-20094013 CNCVE-20094014 CNCVE-20094015 CNCVE-20094013 控制字段名称和值在使用前没有充分过滤，在部分操作下可导致目录遍历。 Patch...

Ubuntu: Security Advisory (USN-891-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...