91 matches found
CVE-2011-4897
CVE-2011-4897 : Affects Tor before 0.2.2.25-alpha when configured as a relay without the Nickname option; it uses the local hostname as the Nickname, exposing potentially sensitive information to remote readers. Connected advisories consistently describe the same behavior and impact. Some entries...
CVE-2011-4897
Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value...
CVE-2010-4897
CVE-2010-4897 is a SQL injection vulnerability affecting BlueCMS 1.6, specifically in comment.php. An attacker could send crafted requests via the X-Forwarded-For HTTP header in a send action to execute arbitrary SQL commands. This is supported by multiple sources (NVD, Red Hat, CVE records). The...
Fedora Update for dhcp FEDORA-2011-4897
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Debian Security Advisory DSA 2093-1 (ghostscript)
The remote host is missing an update to ghostscript announced via advisory DSA 2093-1. OpenVAS Vulnerability Test $Id: deb20931.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2093-1 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
[SECURITY] [DSA 2093-1] New ghostscript packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2093-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano August 19, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2093-1] New ghostscript packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2093-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano August 19, 2010 http://www.debian.org/security/faq -...
DSA-2093-1 ghostscript - several vulnerabilities
Bulletin has no description...
openSUSE Security Update : ghostscript-devel (openSUSE-SU-2010:0425-1)
Specially crafted postscript .ps files could cause buffer overflows in ghostscript that could potentially be exploited to execute arbitrary code CVE-2010-1628, CVE-2010-1869, CVE-2009-4270 ghostscript by default read some initialization files from the current working directory. Local attackers...
CVE-2009-4897
Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document containing a long name...
CVE-2009-4897
Ghostscript (GPL Ghostscript) contains CVE-2009-4897: a buffer overflow in gs/psi/iscan.c can be triggered by a crafted PDF with a long name, enabling remote code execution or memory corruption. Affected: Ghostscript 8.64 and earlier. Exploitation via crafted PDFs; memory corruption could lead to...
Ubuntu Update for ghostscript vulnerabilities USN-961-1
Ubuntu Update for Linux kernel vulnerabilities USN-961-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9611.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for ghostscript vulnerabilities USN-961-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : ghostscript vulnerabilities (USN-961-1)
David Srbecky discovered that Ghostscript incorrectly handled debug logging. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program. This issue only affected...
CVE-2009-4897
Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document containing a long name...
Mandriva Update for desktop-common-data MDVA-2010:135 (desktop-common-data)
Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDVA-2010:135 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Mandriva Update for sane MDVA-2010:134 (sane)
Check for the Version of sane OpenVAS Vulnerability Test Mandriva Update for sane MDVA-2010:134 sane Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Mandriva Update for desktop-common-data MDVA-2010:135 (desktop-common-data)
Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDVA-2010:135 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
CentOS 5 : pwlib (CESA-2007:0932)
Updated pwlib packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PWLib is a library used to support cross-platform applications. In Red Hat Enterprise Linux 5, th...
Ekiga 2.0.5 (GetHostAddress) Remote Denial of Service Exploit
No description provided by source. !/usr/bin/env python Ekiga GetHostAddress Remote Denial of Service Vulnerability CVE-2007-4897 ekiga207dos.py by Jose Miguel Esparza 2007-09-11 S21sec labs import sys,socket if lensys.argv != 3: sys.exit"Usage: " + sys.argv0 + " targethost targetport\n" target =...
