RedHat Update for 389-ds-base RHSA-2016:2594-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : 389-ds-base (RHSA-2016:2594)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:2594 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Updated 389-ds-base packages fix security vulnerability

A vulnerability in 389-ds-base was found that allows to bypass limitations for compare and read operations specified by Access Control Instructions. When having LDAP sub-tree with some existing objects and having BIND DN which have no privileges over objects inside the sub-tree, unprivileged user...

Fedora Update for 389-ds-base FEDORA-2016-b1a36cccc8

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : 389-ds-base (2016-b1a36cccc8)

Release 1.3.4.14 ---- Release 1.3.4.12 ---- Release 1.3.4.11 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

CVE-2015-4992

IBM Sterling B2B Integrator (versions 5.1 and 5.2) is affected by CVE-2015-4992, a clickjacking vulnerability. A remote attacker could hijack a user’s click actions by luring them to a malicious page, enabling UI redress attacks. Remediation in the IBM advisories involves applying interim fixes: ...

FlashFXP Multiple Buffer Overflow Vulnerabilities

FlashFXP is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:flashfxp:flashfxp"...

CVE-2012-4992

FlashFXP is affected by CVE-2012-4992 due to multiple buffer overflows in FlashFXP.exe (TListbox/TComboBox handling). The issue arises in FlashFXP 4.2 and earlier, allowing remote attackers to execute arbitrary code by sending a long unicode string to the TListbox or TComboBox. Public exploitatio...

KLA10162 ACE vulnerability in FlashFXP

Buffer overflows were found in FlashFXP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed strings in listbox or combobox. Original advisories FlashFXP bulletin Exploitation Public exploits exist for th...

CVE-2010-4992

The CVE-2010-4992 entry describes an SQL injection in the Joomla! Payments Plus component version 2.1.5, exploitable via the type parameter in add.html. The vulnerability arises from unsafely handling user input, allowing remote attackers to craft arbitrary SQL commands. Documents confirm affecte...

CVE-2009-4992

The dataset confirms a concrete SQL injection vulnerability in LM Starmail Paidmail 2.0, specifically in paidbanner.php where the vulnerable parameter is ID. The root cause is improper handling of user input enabling arbitrary SQL execution, with remote access and no authentication required impli...

CVE-2008-4992

The CVE-2008-4992 entry concerns the SPARC hypervisor in Sun System Firmware running on UltraSPARC T1/T2/T2+ (Sun System Firmware 6.6.3–6.6.5 and 7.1.3–7.1.3.e). The vulnerability allows logical-domain users to access memory in other logical domains via unknown vectors, indicating a cross-domain ...

Gentoo Security Advisory GLSA 200712-06 (firebird)

The remote host is missing updates announced in advisory GLSA 200712-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability

ZDI-07-057: Firebird processpacket Remote Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-057.html October 10, 2007 -- CVE ID: CVE-2007-4992 -- Affected Vendor: Firebird -- Affected Products: Firebird SQL 2.0.2 -- TippingPointTM IPS Customer Protection: TippingPoin...

CVE-2007-4992

Stack-based buffer overflow in the processpacket function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port 3050...

CVE-2007-4992

CVE-2007-4992 is a stack-based overflow in Firebird SQL 2.0.2’s fbserver.exe process_packet when processing oversized requests on TCP port 3050. This remote vulnerability could allow arbitrary code execution with the Firebird user’s privileges. Affected product: Firebird SQL server (fbserver.exe)...

CVE-2006-4992

JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 contains multiple PHP remote file inclusion vulnerabilities that can allow remote code execution. The issue arises when an attacker supplies a URL in the mosConfig_absolute_path parameter to wp-comments-post.php, wp-feed.php, or wp-trackback.php, e...