[ MDVSA-2013:207 ] samba

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:207 http://www.mandriva.com/en/support/security/ Package : samba Date : August 6, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected i...

Fedora 19 : samba-4.0.8-1.fc19 (2013-14312)

Update to 4.0.8 CVE-2013-4124. Fix location of the Kerberos credentials cache. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Security fix for the ALT Linux 10 package samba version 4.0.8-alt1

Aug. 7, 2013 Alexey Shabalin 4.0.8-alt1 - 4.0.8 - fixed CVE-2013-4124...

Security fix for the ALT Linux 8 package samba version 4.0.8-alt1

Aug. 7, 2013 Alexey Shabalin 4.0.8-alt1 - 4.0.8 - fixed CVE-2013-4124...

Security fix for the ALT Linux 8 package samba-DC version 4.0.8-alt1

Aug. 7, 2013 Alexey Shabalin 4.0.8-alt1 - 4.0.8 - fixed CVE-2013-4124...

CVE-2013-4124

CVE-2013-4124 (Samba) is an integer overflow in read_nttrans_ea_list (nttrans.c) that can be triggered by a malformed EA list, potentially leading to memory consumption DoS. Affected are Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8. The initial entry specifies the vulnerabil...

CVE-2012-6092

Multiple cross-site scripting XSS vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via 1 the refresh parameter to PortfolioPublishServlet.java aka demo/portfolioPublish or Market Data Publisher, or vectors involving 2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via 1 the refresh parameter to PortfolioPublishServlet.java aka demo/portfolioPublish or Market Data Publisher, or vectors involving 2...

CVE-2012-6092

Summary of CVE-2012-6092: Cross-site scripting in Apache ActiveMQ web demos Affected software: Apache ActiveMQ web demos (demo/portfolioPublish and related webapp/websocket/chat.js) prior to 5.8.0. What is vulnerable: Multiple XSS vulnerabilities via (1) refresh parameter to PortfolioPublishServl...

Ubuntu: Security Advisory (USN-900-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for ruby1.9 vulnerabilities USN-900-1

Ubuntu Update for Linux kernel vulnerabilities USN-900-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9001.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for ruby1.9 vulnerabilities USN-900-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 8.10 / 9.04 / 9.10 : ruby1.9 vulnerabilities (USN-900-1)

Emmanouel Kellinis discovered that Ruby did not properly handle certain string operations. An attacker could exploit this issue and possibly execute arbitrary code with application privileges. CVE-2009-4124 Giovanni Pellerano, Alessandro Tanasi, and Francesco Ongaro discovered that Ruby did not...

USN-900-1: Ruby vulnerabilities

Emmanouel Kellinis discovered that Ruby did not properly handle certain string operations. An attacker could exploit this issue and possibly execute arbitrary code with application privileges. CVE-2009-4124 Giovanni Pellerano, Alessandro Tanasi, and Francesco Ongaro discovered that Ruby did not...

Ruby Interpreter Heap Overflow Vulnerability (Windows) - Dec09

This host is installed with Ruby Interpreter and is prone to Heap Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrubyheapbofvulnwindec09.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby Interpreter Heap Overflow Vulnerability Windows - Dec09 Authors: Sujit Ghosal Copyright: Copyright...

Ruby Interpreter Heap Overflow Vulnerability (Dec 2009) - Windows

Ruby Interpreter is prone to a heap overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ruby-lang:ruby";...

Ruby Interpreter Heap Overflow Vulnerability (Dec 2009) - Linux

Ruby Interpreter is prone to a heap overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ruby-lang:ruby";...

Ruby "rb_str_justify()"缓冲区溢出漏洞

CVE ID：CVE-2009-4124 Ruby是一款功能强大的面向对象的脚本语言。 Stringljust, Stringcenter和Stringrjust中存在堆溢出漏洞，允许攻击者在部分条件下执行任意代码。 问题存在于string.c代码中的"rbstrjustify"函数。目前没有详细漏洞细节提供。 Ruby 1.9.x Ruby 1.9.1-p376已经修复此漏洞，建议用户下载使用： ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.1-p376.tar.bz2...

FreeBSD Ports: ruby

The remote host is missing an update to the system as announced in the referenced advisory. VID eab8c3bd-e50c-11de-9cd0-001a926c7637 OpenVAS Vulnerability Test $ Description: Auto generated from VID eab8c3bd-e50c-11de-9cd0-001a926c7637 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: ruby

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-4124

Heap-based buffer overflow in the rbstrjustify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving 1 Stringljust, 2 Stringcenter, or 3 Stringrjust. NOTE: some of these details are obtained from third...