Fedora Update for ndjbdns FEDORA-2012-20967

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-4392

The vulnerability CVE-2012-4392 affects ownCloud Server versions earlier than 4.0.7, where index.php fails to properly validate the oc_token cookie, enabling remote attackers to bypass authentication with a crafted cookie. Multiple connected sources corroborate the authentication bypass issue and...

RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Dec10

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnwindec10.nasl 5373 2017-02-20 16:27:48Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Dec10 Authors: Sooraj KS Copyright: Copyright c 2010...

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4392

CVE-2010-4392 is a heap-based buffer overflow in RealPlayer/HelixPlayer family that allows remote code execution via crafted ImageMap data in RealMedia files. Affected: RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, RealPlayer Enterprise 2.1.2–2.1.3, Linux RealPlayer 11.0.2.1744, possibly HelixPl...

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities

Binary data 5709.prm...

RHEL 4 : HelixPlayer (RHSA-2010:0094)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0094 advisory. - HelixPlayer / RealPlayer: GIF file heap overflow CVE-2009-4242 - HelixPlayer / RealPlayer: compressed GIF heap overflow CVE-2009-4245 -...

CVE-2009-4392

The CVE-2009-4392 entry concerns a SQL injection vulnerability in the TYPO3 XDS Staff List (xds_staff) extension, affected in version 0.0.3 and earlier. The underlying issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The available documents confirm the prod...

djbdns dnscache SOA请求远程缓存中毒漏洞

BUGTRAQ ID: 33818 CVECAN ID: CVE-2008-4392 djbdns是一个由Qmail的作者所设计的轻量级DNS server。 djbdns的dnscache服务组件没有正确地处理SOA记录，如果远程攻击者持续的向服务器发送大量的SOA请求和伪造回复，就会增加DNS缓存投毒攻击的成功概率。 D. J. Bernstein djbdns 1.05 厂商补丁： D. J. Bernstein --------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-4392

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...

CVE-2008-4392

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...

CVE-2008-4392

CVE-2008-4392 concerns the dns cache in the Berkeley dnscache (djbdns 1.05) where concurrent identical outbound DNS queries are not prevented. This can allow remote attackers to spoof DNS responses, demonstrated by a spoofed A record in an SOA response. Connected sources (Nessus/OpenVAS/Fedora ad...

CVE-2008-4392

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...

Mobilink Monitor Client Detection

Binary data 4392.prm...

CVE-2007-4392

CVE-2007-4392 affects Winamp 5.35. A remote-triggered denial of service occurs via an M3U file that recursively includes itself, causing a program stack overflow and application crash. The provided documents confirm the impact but do not include exploit details or concrete remediation steps. No a...

CVE-2006-4392

CVE-2006-4392 describes a local privilege-escalation in the Mach kernel used by Mac OS X 10.4.x (up to 10.4.7) and OpenStep before 4.2. The flaw allows a local user to bypass restrictions by having a parent process force an exception in a setuid child and use Mach exception ports to modify the ch...

Mac OS X &lt;= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)

No description provided by source. / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorize...

Mac OS X <= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)

Exploit for macOS platform in category local exploits ====================================================================== Mac OS X = 10.4.7 Mach Exception Handling Local Exploit 10.3.x 0day ====================================================================== / excploit.c - 28 Nov 2005 -...

Mac OS X Multiple Vulnerabilities (Security Update 2006-006)

The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied. Security Update 2006-006 contains several security fixes for the following programs : - CFNetwork - Flash Player - QuickDraw Manager - SASL - WebCore C Tenable Network Security, Inc. if...