mcrypt 2.5.8 - Local Stack Overflow

!/usr/bin/perl Title : mcrypt ', $filename; print F $file; close F; sub buildfile magic $file .= "\x00m\x03"; flags $file .= pack'C', 1 6; algorithm $file .= "H@Ck3d\x00"; keysize $file .= pack'S', 0xdead; mode $file .= "h@cK3d\x00"; keymode $file .= "H@CK3D\x00"; sflags $file .= "\xff"; payload...

CVE-2012-4409

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

CVE-2012-4409

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

CVE-2012-4409

The CVE-2012-4409 issue affects MCrypt, specifically mcrypt versions up to and including 2.6.8, due to a flaw in the check_file_head() function (extra.c). A crafted header with long salt data during decryption can trigger a stack-based buffer overflow, enabling a user-assisted remote attacker to ...

Fedora Update for mcrypt FEDORA-2012-17290

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-17290 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for mcrypt FEDORA-2012-17318

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mcrypt FEDORA-2012-13657

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-13657 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for mcrypt FEDORA-2012-13657

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mcrypt FEDORA-2012-13656

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 18 : mcrypt-2.6.8-9.fc18 (2012-13599)

Resolve buffer overflow in CVE-2012-4409. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

PHP < 5.3.4 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

CVE-2011-4409

CVE-2011-4409 affects the Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS, where the client fails to properly validate SSL certificates, enabling a remote attacker to perform a MITM to spoof a server and read/modify sensitive data. Connected sources (Ubuntu Security Notices US...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU02764)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Fedora Update for mingw-libtasn1 FEDORA-2012-4409

Check for the Version of mingw-libtasn1 OpenVAS Vulnerability Test Fedora Update for mingw-libtasn1 FEDORA-2012-4409 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

SuSE 11.1 Security Update : icu (SAT Patch Number 5653)

The following bugs have been fixed : - Specially crafted strings could cause a buffer overflow in icu. CVE-2011-4599 - An integer overflow in the getSymbol function could crash applications using icu CVE-2010-4409 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

SuSE 10 Security Update : icu (ZYPP Patch Number 7928)

The following bug has been fixed : - An integer overflow in the getSymbol function could crash applications using icu. CVE-2010-4409 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001)

This host is missing an important security update according to Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-001.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.6 Multiple Vulnerabilities 2011-001 Authors: Antu Sanadi Copyright:...

SuSE 11.1 Security Update : tgt (SAT Patch Number 4409)

This update of tgt fixes multiple bugs : - tgtadm user unbind broken bnc633111 - iscsitarget package not supported bnc513934 - iscsitarget vs. tgt and /etc/ietd.conf bnc598927 - tgt fix double free flaw bnc665415, CVE-2011-0001 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandriva Update for php MDVSA-2011:052 (php)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Design/Logic Flaw

Unspecified vulnerability in the NumberFormatter::setSymbol aka numfmtsetsymbol function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via an invalid argument, a related issue to CVE-2010-4409...