121 matches found
CVE-2013-5557
Cisco ASA WebVPN: The Proxy Bypass Content Rewriter in WebVPN (9.1.x and earlier) contains a fault in the Proxy Bypass Content Rewriter implementation that could be exploited by an authenticated remote attacker via an HTTP request to trigger a rewrite, causing a denial of service (device crash or...
F5 Networks BIG-IP : PHP vulnerability (SOL9761)
A heap-based buffer overflow in PHP 4.3.0 through 5.2.6 may allow attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL9761. The text description of this...
CVE-2014-5557
The CVE-2014-5557 entry refers to the Android app “America’s Economy for Phone” (air.gov.census.mobile.phone.americaseconomy) version 1.5.2, which does not verify SSL X.509 certificates. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Multip...
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (OS X)
No description provided by source. !/usr/bin/perl VERITAS-OSX.pl - VERITAS NetBackup Format Strings OSX/ppc Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; my $shellcode = / OSX...
openSUSE Security Update : finch (openSUSE-SU-2012:0066-1)
Remote users could crash pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601, CVE-2011-4603, CVE-2011-4602, CVE-2011-1091. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-5557...
CVE-2012-5557
The vulnerability CVE-2012-5557 affects the Drupal module User Read-Only (versions 6.x-1.x up to 6.x-1.4 and 7.x-1.x up to 7.x-1.4). The root cause is improper role assignment when more than three roles are configured, which could allow remote authenticated users to escalate privileges (demonstra...
CVE-2012-5557
The User Read-Only module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, does not properly assign roles when there are more than three roles on the site and certain unspecified configurations, which might allow remote authenticated users to gain privileges by performing certain...
Scientific Linux Security Update : php on SL3.x, SL4.x, SL5.x i386/x86_64
A heap-based buffer overflow flaw was found in PHP's mbstring extension. A remote attacker able to pass arbitrary input to a PHP script using mbstring conversion functions could cause the PHP interpreter to crash or, possibly, execute arbitrary code. CVE-2008-5557 A flaw was found in the handling...
PHP < 5.2.7 Multiple Vulnerabilities
PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...
[security bulletin] HPSBMA02492 SSRT100079 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02029444 Version: 1 HPSBMA02492 SSRT100079 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Cross Site Scripting XSS, Denial of Service DoS, Execution of Arbitrary Code,...
Gentoo Security Advisory GLSA 201001-03 (php)
The remote host is missing updates announced in advisory GLSA 201001-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
SuSE9 Security Update : PHP4 (YOU Patch Number 12382)
Specially crafted strings could trigger a heap-based buffer overflow in the php mbstring extension. Attackers could potenially exploit that to execute arbitrary code. CVE-2008-5557 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-441)
This update of php5 fixes a directory traversal bug in ZipArchive CVE-2008-5658 and a buffer overflow in the mstring extension CVE-2008-5557. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
HP-UX Update for Apache Web Server Suite HPSBUX02431
Check for the Version of Apache Web Server Suite OpenVAS Vulnerability Test HP-UX Update for Apache Web Server Suite HPSBUX02431 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Fedora Core 10 FEDORA-2009-3768 (maniadrive)
The remote host is missing an update to maniadrive announced via advisory FEDORA-2009-3768. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Fedora Core 10 FEDORA-2009-3768 (maniadrive)
The remote host is missing an update to maniadrive announced via advisory FEDORA-2009-3768. OpenVAS Vulnerability Test $Id: fcore20093768.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3768 maniadrive Authors: Thomas Reinke Copyright: Copyright c...
Fedora Core 9 FEDORA-2009-3848 (maniadrive)
The remote host is missing an update to maniadrive announced via advisory FEDORA-2009-3848. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
[SECURITY] [DSA 1789-1] New php5 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1789-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 04, 2009 http://www.debian.org/security/faq -...
Mandriva Linux Security Advisory : php (MDVSA-2009:045)
A number of vulnerabilities have been found and corrected in PHP : improve mbflfiltconvhtmldecflush error handling in ext/mbstring/libmbfl/filters/mbfilterhtmlent.c CVE-2008-5557. Additionally on Mandriva Linux 2009.0 and up the php-mbstring module is linked against a separate shared libmbfl...
RedHat Security Advisory RHSA-2009:0337
The remote host is missing updates announced in advisory RHSA-2009:0337. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP's mbstring extension. A remote attacker able to pass arbitrary input to a PHP scrip...