162 matches found
rsyslog security update
CentOS Errata and Security Advisory CESA-2012:0796 Updated rsyslog packages that fix one security issue, multiple bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common...
Medium: rsyslog
Issue Overview: A numeric truncation error, leading to a heap-based buffer overflow, was found in the way the rsyslog imfile module processed text files containing long lines. An attacker could use this flaw to crash the rsyslogd daemon or, possibly, execute arbitrary code with the privileges of...
Mandriva Update for rsyslog MDVSA-2012:100 (rsyslog)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedHat Update for rsyslog RHSA-2012:0796-04
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-4623
CVE-2010-4623 affects IBM Tivoli Access Manager for e-Business WebSEAL: WebSEAL 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to trigger a denial of service by performing shift-reload actions, reducing availability. The issue is mitigated by applying the FP0001 patch (6.1.1-...
CVE-2009-4623
CVE-2020-35598 (Advanced Comment System 1.0) is affected by Local File Inclusion via advanced_component_system/index.php?ACS_path=..%2f. Exploitation can lead to unauthorized file access and, per the Nuclei entry, may enable remote code execution and full system compromise. CVE-2009-4623 is relat...
CVE-2009-4623
creationtimestamp| type| source ---|---|--- 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9623 2023-11-12 02:45:06+00:00| seen| https://t.me/arpsyndicate/107...
CVE-2008-4623
CVE-2008-4623 is an SQL injection vulnerability in the Joomla DS-Syndicate (com_ds-syndicate) component, version 1.1.1. The flaw allows remote attackers to execute arbitrary SQL commands via the feed_id parameter to index2.php. The affected product is Joomla with the DS-Syndicate component; the u...
CVE-2008-4623
SQL injection vulnerability in the DS-Syndicate comds-syndicate component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feedid parameter to index2.php...
Debian: Security Advisory (DSA-1304-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 10 Security Update : YaST2 (ZYPP Patch Number 4623)
This update fixes a security bug in yast2-core that allowed local attackers to provide malicious yast2 modules to yast2 that are executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. Thanks to Stefan Nordhausen for reporting th...
IBM AIX bellmail 有邮件用户代理本地栈溢出漏洞
BUGTRAQ ID: 26257 CVECAN ID: CVE-2007-4623 IBM AIX是一款商业性质的UNIX操作系统。 AIX的bellmail工具实现上存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升权限。 AIX中所安装的bellmail程序中的sendrmt函数存在栈溢出漏洞，当用户试图使用“m”命令发送邮件时会调用该函数。在这个函数中，调用了一些sprintf以将用户提供的输入连接到静态字符串，但没有执行边界检查来确保所生成的字符串会适合栈上所分配的目标缓冲区，因此攻击者可以提供超长参数控制栈上数据和受影响进程，导致以root权限执行任意指令。 IBM AIX 5...
AIX 5.2 TL 10 : bos.net.tcp.client (U812065)
The remote host is missing AIX PTF U812065, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812065. The text itself is copyright C...
AIX 5.3 TL 6 : bos.net.tcp.client (U812719)
The remote host is missing AIX PTF U812719, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812719. The text itself is copyright C...
CVE-2007-4623
CVE-2007-4623 is a local stack-based buffer overflow in the bellmail utility on IBM AIX 5.2/5.3. The vulnerability exists in the bellmail/sendrmt function, where user input is concatenated with static strings using sprintf without proper bounds checking, allowing a local attacker to overflow the ...
Debian DSA-1304-1 : kernel-source-2.6.8 - several vulnerabilities
CVE-2006-6060 CVE-2006-6106 CVE-2006-6535 CVE-2007-0958 CVE-2007-1357 CVE-2007-1592 Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. This update also fixes a regression in the smbfs subsystem...
[SECURITY] [DSA 1304-1] New Linux kernel 2.6.8 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1304-1 [email protected] http://www.debian.org/security/ Dann Frazier June 16th, 2007 http://www.debian.org/security/faq -...
CVE-2006-4623
The vulnerability CVE-2006-4623 affects the Linux kernel DVB ULE decapsulation path: Unidirectional Lightweight Encapsulation (ULE) in dvb-core/dvb_net.c of the kernel 2.6.17.8. A remote attacker can cause a denial of service (crash) by sending a ULE packet with an SNDU length of 0. Public adviso...
CVE-2005-4623
CVE-2005-4623 affects eFileGo 3.01 where upload.exe can be driven to a denial of service (CPU consumption) by supplying an invalid directory name. The vulnerability is described across multiple sources as enabling remote DoS via a crafted argument. No explicit exploitation details, affected versi...
