libtar security update

1.2.11-17.el64.1 - fix CVE-2013-4397: buffer overflows by expanding a specially-crafted archive...

CVE-2011-4397

...

CVE-2011-4397

CVE-2011-4397 entry is rejected and not active per the initial description.

CVE-2012-4397

CVE-2012-4397 affects ownCloud prior to 4.0.1. The issue is multiple XSS vulnerabilities in the calendar and contacts modules: (1) calendar displayname fields (part.choosecalendar.rowfields.php and part.choosecalendar.rowfields.shared.php) and (2) unspecified vectors in apps/contacts/lib/vcard.ph...

SuSE 11.1 Security Update : libtiff (SAT Patch Number 4397)

The following bugs have been fixed : - Specially crafted tiff files could cause a heap-based buffer overflow in the thunder-decoder. CVE-2011-1167 - Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network...

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4397

CVE-2010-4397 affects RealNetworks RealPlayer 11.0–11.1 (and variants on Windows, Mac, and Linux) where an integer overflow in pnen3260.dll occurs while parsing the TIT2 atom in AAC files. This leads to remote code execution if a crafted AAC file is opened. The vulnerability is documented across ...

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities

Binary data 5709.prm...

CVE-2008-4397

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16404 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/caarcserve342.rb 2025-02-06 03:13:39+00:00|...

Computer Associates ARCserve - REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit)

$Id: caarcserve342.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2009-4397

CVE-2009-4397 describes a cross-site scripting (XSS) vulnerability in the TYPO3-based Diocese of Portsmouth Resources Database (pd_resources) extension, version 0.1.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected: pd_resourc...

Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow

This module exploits a buffer overflow in Computer Associates BrightStor ARCserve r11.5 build 3884. By sending a specially crafted RPC request to opcode 0x342, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need set...

Immunity Canvas: BRIGHTSTOR_CMDEXEC

Name| brightstorcmdexec ---|--- CVE| CVE-2008-4397 Exploit Pack| CANVAS Description| brightstorcmdexec Notes| CVE Name: CVE-2008-4397 VENDOR: Computer Associates Notes: This exploit will start a TFTP server which is why it requires root and have the remote side download and execute a MOSDEF...

CVE-2008-4397

CVE-2008-4397 is a directory traversal flaw in the RPC interface (asdbapi.dll) of CA ARCserve Backup (BrightStor ARCserve Backup) versions r11.1–r12.0. An unauthenticated remote attacker can craft RPC calls (opnum 0x10A) to traverse directories and execute arbitrary commands. Multiple connected s...

CA BrightStor ARCserve Backup RPC Interface (asdbapi.dll) Traversal Arbitrary Command Execution

This host is running BrightStor ARCServe for Windows. The remote version of this software is affected by an arbitrary command execution vulnerability. By sending a specially crafted packet to the RPC server on TCP port 6504, an unauthenticated, remote attacker may be able to execute code on the...

cabrightstor-exec.txt

CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: CA BrightStor ARCServe BackUp is an overall data backup solution. The RPC interface of CA BrightStor ARCServe BackUp does not handle user's input...

CA-ArcServe

CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

CVE-2007-4397

CVE-2007-4397 involves multiple CRLF injection vulnerabilities in several XMMS-related scripts (e.g., xmms-thing 1.0, XMMS Remote Control Script 1.07, Disrok 1.0, a2x 0.0.1, Another xmms-info script 1.0, XChat-XMMS 0.8.1, and related XChat scripts). The underlying issue is CRLF sequences in the s...

CVE-2006-4397

CVE-2006-4397 affects Apple Mac OS X 10.4–10.4.7, where an unchecked error in the LoginWindow can prevent destruction of Kerberos tickets if logon to a network account fails at the login window. This may allow a subsequent user to access the original user’s Kerberos tickets. The provided document...