EulerOS 2.0 SP3 : coreutils (EulerOS-SA-2020-1374)

According to the versions of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering...

Security Bulletin: Permission Control Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2019-4042)

Summary IBM Sterling B2B Integrator Standard Edition has addressed the permission control vulnerability. Vulnerability Details CVEID: CVE-2019-4042 DESCRIPTION: IBM Sterling B2B Integrator could allow a user without permission to access EBICS configuration to use its own secure token to access th...

CVE-2015-4042

CVE-2015-4042 affects GNU Coreutils (sort) up to version 8.23, where the keycompare_mb function in sort.c uses a size calculation that does not account for multibyte characters. This can allow a specially crafted long UTF-8 string to trigger an integer overflow, potentially causing a denial of se...

CVE-2018-4042

CVE-2018-4042 affects CleanMyMac X 4.04. The vulnerability is in the helper service’s removeLaunchdAgentAtPath function, where there is no validation of the calling application, allowing a local attacker to run as root and modify/delete root-owned files. The advisory notes this is addressed by up...

CVE-2017-4042

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-4042

CVE-2017-4042 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4042

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors...

CVE-2016-4042

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors...

CVE-2016-4042

Plone CMS versions 3.3 through 5.1a1 are affected by CVE-2016-4042. The issue allows remote attackers to obtain the ID of sensitive content via unspecified vectors, constituting information disclosure. A validated remediation in connected sources indicates affected versions are before 4.3.10 (for...

SUSE SLED12 / SLES12 Security Update : coreutils (SUSE-SU-2015:1637-1)

This update for coreutils provides the following fixes : - Fix memory handling error with case insensitive sort using UTF-8. CVE-2015-4041, CVE-2015-4042 - Ensure 'df -a' shows all remote file system entries. - Only suppress remote mounts of separate exports with 'df --total'. - Document that 'df...

Updated coreutils package fixes security vulnerability

Buffer overflows in sort related to the usage of UTF-8 characters CVE-2015-4041, CVE-2015-4042...

MGASA-2015-0259 Updated coreutils package fixes security vulnerability

Buffer overflows in sort related to the usage of UTF-8 characters CVE-2015-4041, CVE-2015-4042...

Postfix < 2.4.9, 2.5.5, 2.6-20080902 - (.forward) Local DoS Exploit

No description provided by source. / http://www.wekk.net/research/CVE-2008-4042/CVE-2008-4042-exploit.c http://www.wekk.net/research/CVE-2008-3889/CVE-2008-3889-exploit.c Exploit for Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel...

ARC PcVue ActiveX Control SCADA Remote Code Execution (CVE-2011-4042; CVE-2011-4043 ; CVE-2011-4044; CVE-2011-4045)

A buffer overflow vulnerability has been reported in SCADA ARC PcVue...

CVE-2013-5370

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042...

CVE-2013-4042

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370...

CVE-2013-4042

IBM SPSS Collaboration and Deployment Services (CDS) is affected by CVE-2013-4042 and CVE-2013-5370. The IBM security bulletin confirms remote code execution vulnerabilities for all users, impacting CDS versions 4.2.1 and 5.0 up to FP2. The CVSS base score is 10 (network vector, no authentication...

CVE-2011-4042

CVE-2011-4042 describes an unspecified ActiveX control (SVUIGrd.ocx) in ARC Informatique PcVue 6.0–10.0, FrontVue, and PlantVue where remote attackers can execute arbitrary code by delivering a crafted HTML document that gains control of a function pointer. Public advisories note multiple artifac...

CVE-2011-4042

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer...

KLA10292 Multiple vulnerabilities in PcVue

Multiple critical vulnerabilities have been found in PcVue. Malicious users can exploit these vulnerabilities to execute arbitrary code, modify local files or cause denial of service. Below is a complete list of vulnerabilities 1. Unspecified vectors can be exploited remotely; 2. A buffer overflo...