83 matches found
SUSE: Security Advisory (SUSE-SU-2013:1276-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-4078
CVE-2018-4078 entry is rejected/not used per the Initial Description.
USN-4078-2: OpenLDAP vulnerabilities
USN-4078-1 fixed several vulnerabilities in openldap. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that OpenLDAP incorrectly handled rootDN delegation. A database administrator could use this issue to request...
Ubuntu 16.04 LTS / 18.04 LTS : OpenLDAP vulnerabilities (USN-4078-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4078-1 advisory. It was discovered that OpenLDAP incorrectly handled rootDN delegation. A database administrator could use this issue to request authorization...
CVE-2019-4078
creationtimestamp| type| source ---|---|--- 2019-05-23 14:48:18+00:00| seen| https://t.me/cvemitreorg/180...
CVE-2019-4078
CVE-2019-4078 affects IBM WebSphere MQ installations on Windows where incorrect permissions on MQ installation directories permit a local non-privileged user to execute code with administrator privileges. Affected MQ versions include 8.0.0.0–8.0.0.9 and 9.0.0.0–9.1.1. IBM remediation/fixes are av...
CVE-2017-4078
CVE-2017-4078 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-4078
CVE-2015-4078 maps to the POODLE-like issue where SSLv3 is supported by Cloudera Navigator 2.2.x (pre-2.2.4) and 2.3.x (pre-2.3.3), enabling a padding-oracle attack to obtain plaintext data. Public references in the connected docs describe SSLv3/POODLE vulnerability details and remediation patter...
CVE-2016-4078
The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of service deep recursion and application crash via a crafted packet, related to epan/dissectors/packet-capwap.c and...
CVE-2016-4078
CVE-2016-4078 affects the Wireshark IEEE 802.11 dissector (Wireshark 1.12.x up to 1.12.10, and 2.0.x up to 2.0.2). A crafted CAPWAP/IEEE802.11 element list can trigger deep recursion and crash the analyzer, enabling a denial of service when a crafted packet is processed. Root cause: improper rest...
F5 Networks BIG-IP : Multiple Wireshark vulnerabilities (K15868)
CVE-2013-4074 The dissectcapwapdata function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service application...
MS14-076: Vulnerability in Internet Information Services (IIS) Could Allow Security Feature Bypass (2982998)
The remote Windows host is affected by a security feature bypass vulnerability that can lead to a bypass of the 'IP Address and Domain Restrictions' filtering rules. Successful exploitation of this vulnerability by a remote attacker allows clients from restricted or blocked domains to gain access...
Microsoft Internet Information Services Security Feature Bypass Vulnerability (2982998)
This host is missing an important security update according to Microsoft Bulletin MS14-076. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
CVE-2014-4078
CVE-2014-4078 affects Microsoft Internet Information Services (IIS) 8.0 and 8.5. The vulnerability is in the IP Security feature, where wildcard rules in the IP Address and Domain Restrictions list are not properly processed, enabling a remote attacker to bypass the intended rule set via an HTTP ...
KLA10610 Security bypass vulnerability in Microsoft IIS
Improper wildcard processing was found in Microsoft IIS. By exploiting this vulnerability malicious users can bypass intended rules. This vulnerability can be exploited remotely via a specially designed HTTP request. Original advisories CVE-2014-4078 Related products...
Microsoft Internet Explorer Multiple Vulnerabilities (2976627)
This host is missing a critical security update according to Microsoft Bulletin MS14-051. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
openSUSE Security Update : kernel (openSUSE-SU-2011:0004-1)
The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2010-4347: A local user could inject ACPI code into the kernel via the world-writable 'customdebug' file, allowing local privilege escalation. CVE-2010-4258: A local attack...
Fedora Update for wireshark FEDORA-2013-17661
Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2013-17661 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
CVE-2012-4078
The Cisco UCS Baseboard Management Controller (BMC) is affected by a vulnerability due to improper filtering of SSH escape sequences, allowing an authenticated, remote attacker to bypass part of the authentication via SSH port forwarding and access services with elevated privileges. The issue (Bu...