Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise MRG 1.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Ubuntu 10.10 : linux vulnerabilities (USN-1081-1)

It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-3698 Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could...

CVE-2010-4250

creationtimestamp| type| source ---|---|--- 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35013...

Nmap NSE: SMB Check Vulnerabilities

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4250

CVE-2009-4250 affects CuteNews/CuteNews UTF-8 workflows (CuteNews 1.4.6 and UTF-8 CuteNews before 8b). It describes multiple cross-site scripting (XSS) vulnerabilities allowing injection of arbitrary script/HTML via: register.php (result), search.php (user), editnews/index.php (cat_msg, source_ms...

CuteNews/UTF-8 CuteNews Multiple Vulneablities

The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...

CVE-2009-4250

creationtimestamp| type| source ---|---|--- 2009-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10002 2009-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33343...

SLES9: Security update for man

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: man For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021681 within the SuSE...

SuSE9 Security Update : man (YOU Patch Number 11492)

A heap-based buffer overflow in the 'man' command could potentially be exploited by users to run code as root. CVE-2006-4250 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Directory traversal

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color...

Immunity Canvas: MS08_067

Name| ms08067 ---|--- CVE| CVE-2008-4250 Exploit Pack| CANVAS Description| Windows Server Service Underflow MS08-067 Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx CVE Name: CVE-2008-4250 VENDOR: Microsoft Notes: If you need some localized version of Windows X...

CVE-2008-4250

The CVE-2008-4250 issue is a remote code execution vulnerability in the Windows Server Service. The root cause is a buffer/overflow in the path canonicalization logic (triggered via crafted RPC requests to NetAPI32/Server Service), affecting Windows versions listed in the entry (e.g., Windows 200...

Microsoft Windows Server Service RPC Request Buffer Overflow (MS08-067; CVE-2008-4250)

Microsoft Server Service provides support for Remote Procedure Call RPC, resource sharing, and named pipe communication over the network. A remote code execution vulnerability has been discovered in Microsoft Windows Server Service. The vulnerability is due to an error in the Server service that...

CVE-2008-4250

creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6824 2008-10-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6841 2008-11-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7104 2008-11-16...

MS08-067: Microsoft Windows Server Service Crafted RPC Request Handling Unspecified Remote Code Execution (958644) (ECLIPSEDWING)

The remote Windows host is affected by a remote code execution vulnerability in the 'Server' service due to improper handling of RPC requests. An unauthenticated, remote attacker can exploit this, via a specially crafted RPC request, to execute arbitrary code with 'System' privileges. ECLIPSEDWIN...

MS08-067: Microsoft Windows Server Service Crafted RPC Request Handling Remote Code Execution (958644) (ECLIPSEDWING) (uncredentialed check)

The remote Windows host is affected by a remote code execution vulnerability in the 'Server' service due to improper handling of RPC requests. An unauthenticated, remote attacker can exploit this, via a specially crafted RPC request, to execute arbitrary code with 'System' privileges. ECLIPSEDWIN...

openSUSE 10 Security Update : man (man-3100)

A heap based buffer overflow in the 'man' command could potentially be exploited by users to run code as root CVE-2006-4250. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update man-3100. The text...

CVE-2007-4250

The CVE-2007-4250 entry concerns the isChecked function in Toolbar.DLL of Advanced Searchbar prior to 3.33. The vulnerability is exploitable remotely and leads to a denial of service via a NULL dereference, resulting in a browser crash. Details specify the vulnerable component and version, but th...

CVE-2006-4250

Buffer overflow in man and mandb man-db 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag...

CVE-2006-4250

The CVE-2006-4250 entry corresponds to a heap-based buffer overflow in the man and mandb utilities (man-db) affecting 2.4.3 and earlier, exploitable by local users via crafted arguments to the -H flag to potentially run arbitrary code with the user’s privileges (often root in vendor advisories). ...