65 matches found
CVE-2011-4420
CVE-2011-4420 entry rejected; not associated with an active vulnerability and not used.
CVE-2015-4420
Opsview CVE-2015-4420 affects Opsview 4.6.2 and earlier, with multiple XSS flaws exploitable via (1) crafted check plugins, (2) description text in a host profile, or (3) the plugin_args parameter on a Test service check page. The issue enables remote injection of arbitrary script/HTML and is doc...
(0Day) Wavelink Emulation License Server LicenseServer.exe HTTP Request Headers Remote Code Execution Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Wavelink Emulation License Server. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of HTTP requests in LicenseServer.exe listening by default on por...
CVE-2014-4420
The CVE-2014-4420 entry describes a kernel memory initialization flaw in the network-statistics interface of Apple iOS (pre-8) and Apple TV (pre-7). A crafted application could leak memory contents and layout information from the kernel, similarly to other CVEs in the bundle. The root cause is me...
Updated libtar package fixes security vulnerability
A directory traversal attack was reported against libtar, a C library for manipulating tar archives. The application does not validate the filenames inside the tar archive, allowing to extract files in arbitrary path. An attacker can craft a tar file to override files beyond the tarextractglob an...
UBUNTU-CVE-2013-4420
Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. dot dot in a crafted tar file...
CVE-2013-4420
Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. dot dot in a crafted tar file...
CVE-2013-4420
CVE-2013-4420 affects libtar 1.2.20 and earlier, where tar_extract_glob and tar_extract_all are vulnerable to directory traversal via .. in crafted tar files, allowing remote overwrite of arbitrary files. Several connected advisories confirm affected versions and note a patched version is availab...
Debian DSA-2863-1 : libtar - directory traversal
A directory traversal attack was reported against libtar, a C library for manipulating tar archives. The application does not validate the filenames inside the tar archive, allowing to extract files in arbitrary path. An attacker can craft a tar file to override files beyond the tarextractglob an...
[SECURITY] [DSA 2863-1] libtar security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2863-1 [email protected] http://www.debian.org/security/ Luciano Bello February 18, 2014 http://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-2863-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-4420
CVE-2010-4420 affects Oracle Database with Database Vault (versions 10.2.0.3–10.2.0.5, 11.1.0.7, 11.2.0.1). The initial entry describes an unspecified local vulnerability affecting confidentiality and integrity via unknown vectors in the Database Vault component. Connected sources confirm the vul...
CVE-2009-4420
The CVE-2009-4420 issue describes a buffer overflow in the bd daemon of F5 Networks BIG-IP Application Security Manager (ASM) and Protocol Security Manager (PSM). Affected are ASM versions 9.4.4–9.4.7 and 10.0.0–10.0.1, and PSM versions 9.4.5–9.4.7 and 10.0.0–10.0.1. The underlying cause is a buf...
CVE-2008-4420
Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to...
CVE-2008-4420
CVE-2008-4420 concerns multiple stack-based buffer overflows in DZIP32.DLL (DynaZip Max) and DZIPS32.DLL (DynaZip Max Secure) that are triggered by a long filename in a ZIP archive during actions such as Fix/Repair, Add, Update, or Freshen. The vulnerables are DynaZip components shipped in variou...
CVE-2008-4420
Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to...
[security bulletin] HPSBMA02396 SSRT080175 rev.1 - HP OpenView Performance Agent and HP Performance Agent Running on Windows, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01622011 Version: 1 HPSBMA02396 SSRT080175 rev.1 - HP OpenView Performance Agent and HP Performance Agent Running on Windows, Remote Execution of Arbitrary Code NOTICE: The information in this...
SuSE 10 Security Update : qt3 (ZYPP Patch Number 4420)
This update fixes a buffer overflow in qt3 while handling UTF8 characters. CVE-2007-4137 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29566;...