80 matches found
Ubuntu: Security Advisory (USN-1991-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1991-1: GNU C Library vulnerabilities
It was discovered that the GNU C Library incorrectly handled the strcoll function. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. CVE-2012-4412, CVE-2012-4424 It was discovered that the GNU C Library incorrectly handled multibyte characters in t...
CVE-2012-4412
Integer overflow in string/strcolll.c in the GNU C Library aka glibc or libc6 2.17 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow...
CVE-2012-4412
CVE-2012-4412 affects the GNU C Library (glibc) up to and including version 2.17. The issue is an integer overflow in string/strcoll_l.c that can be triggered by a long string, leading to a heap-based buffer overflow. This can cause a denial of service (crash) and, per the description, may allow ...
CVE-2012-4412
Integer overflow in string/strcolll.c in the GNU C Library aka glibc or libc6 2.17 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow...
Fedora Update for glibc FEDORA-2013-17475
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for glibc FEDORA-2013-15316
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : glibc-2.17-14.fc19 (2013-15316)
systemd is now required during build so that installing or updating nscd does not result in any warnings. rtkaio bits are now tested correctly. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora Update for glibc FEDORA-2013-15053
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-6422
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions 0666 for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted...
CVE-2012-6422
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions 0666 for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted...
CVE-2010-4412
CVE-2010-4412 describes multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4. The issues allow remote attackers to inject arbitrary web script or HTML via (1) id in olsrd.xml action to pkg_edit.php, (2) xml in pkg.php, or (3) if in status_graph.php, or (4) interfaces.php. The r...
CVE-2009-4412
Summary : CVE-2009-4412 is an unrestricted file upload vulnerability in Serendipity prior to version 1.5. What’s affected : Serendipity (s9y) software; vulnerable component is the file upload handling that accepts an executable extension followed by a safe extension. Root cause : Remote authentic...
CVE-2008-4412
Unspecified vulnerability in HP Systems Insight Manager SIM before 5.2 Update 2 C.05.02.02.00 allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2008-4412
HP Systems Insight Manager (SIM) affected up to version 5.2 Update 2 (C.05.02.02.00). The CVE-2008-4412 entry describes an unspecified vulnerability that could allow remote attackers to obtain sensitive information via unspecified vectors. OpenVAS entries corroborate Windows and Linux variants an...
CVE-2007-4412
CVE-2007-4412 describes multiple cross-site scripting (XSS) vulnerabilities in Headstart Solutions DeskPRO 3.0.2. The issues allow remote authenticated users to inject arbitrary script/HTML via unspecified parameters to a set of PHP scripts (techs.php, ticket_category.php, ticket_priority.php, ti...
CVE-2006-4412
WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote attackers to execute arbitrary code via a crafted HTML file, which accesses previously deallocated objects...
CVE-2006-4412
The CVE-2006-4412 issue affects WebKit in Apple Mac OS X 10.3.x (up to 10.3.9) and 10.4.x (up to 10.4.8). A crafted HTML file could access previously deallocated objects, allowing remote attackers to execute arbitrary code. Apple released Security Update 2006-007 to address this and related vulne...
CVE-2005-4412
The CVE-2005-4412 issue affects Citrix Program Neighborhood client prior to 9.150, where the user password is cached in plaintext in the GUI while asterisks visually obfuscate it. An attacker with access to the session can retrieve the password by directly accessing the password field. No explici...
