SLES9: Security update for xsupplicant

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xsupplicant For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018467 within the...

SLES9: Security update for xsupplicant

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xsupplicant For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018467 within the...

SuSE9 Security Update : xsupplicant (YOU Patch Number 11386)

xsupplicant has been upgraded to version 1.2.8, which includes bugfixes and one security fix : - A post-authentication stack overflow in the EAP handling could be used by already authenticated attacker to overflow a stack buffer and so potentially execute code. CVE-2006-5601 %NASLMINLEVEL 70300 C...

CVE-2008-5601

CVE-2008-5601 – Normal mode Affected software: User Engine Lite ASP. Vulnerability: The application stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the database file (users.mdb) via a direct request. Impact: Exposure of the d...

SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 5601)

Multiple issues have been fixed in gnutls. CVE-2008-1948 GNUTLS-SA-2008-1-1, CVE-2008-1949 GNUTLS-SA-2008-1-2 and CVE-2008-1950 GNUTLS-SA-2008-1-3 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : xsupplicant (ZYPP Patch Number 2455)

xsupplicant has been upgraded to version 1.2.8, which includes bugfixes and one security fix : - A post-authentication stack overflow in the EAP handling could be used by already authenticated attacker to overflow a stackbuffer and so potentially execute code. CVE-2006-5601 %NASLMINLEVEL 70300 C...

RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflow

This module exploits a stack buffer overflow in RealOne Player V2 Gold Build 6.0.11.853 and RealPlayer 10.5 Build 6.0.12.1483. By sending an overly long string to the "Import" method, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/downlo...

RealNetworks RealPlayer Playlist Handling Buffer Overflow (CVE-2007-5601)

RealNetworks RealPlayer and RealOne Player are media player applications that are capable of playing back numerous multimedia file formats. A buffer overflow vulnerability has been reported in RealNetworks RealPlayer application. The vulnerability is due to an error in a RealPlayer ActiveX contro...

RealPlayer ActiveX control playlist name buffer overflow

Added: 10/25/2007 CVE: CVE-2007-5601 BID: 26130 OSVDB: 41430 Background RealPlayer and RealOne Player include a number of ActiveX controls allowing functions to be called by scripts embedded in web pages. Problem The RealPlayer Database Component MPAMedia.dll is affected by a buffer overflow...

Immunity Canvas: REAL_IMPORT

Name| realimport ---|--- CVE| CVE-2007-5601 Exploit Pack| CANVAS Description| Real Player ActiveX Import Overflow Notes| CVE Name: CVE-2007-5601 VENDOR: Real URL: http://www.us-cert.gov/cas/techalerts/TA07-297A.html VersionsAffected: Repeatability: Infinite References: CVE Url:...

CVE-2007-5601

CVE-2007-5601 describes a stack-based buffer overflow in RealNetworks RealPlayer components (MPAMedia.dll) when handling playlist names, exploitable via the IERPCtl ActiveX control (ierpplug.dll) by sending a long Import() string. Affected products include RealOne Player and RealPlayer 10.x (incl...

RealPlayer playlist name stack buffer overflow

Overview RealPlayer contains a stack buffer overflow in the handling of playlist names, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer is a multimedia application that allows users to view local and remote...

openSUSE 10 Security Update : xsupplicant (xsupplicant-2459)

xsupplicant has been upgraded to version 1.2.8, which includes bugfixes and one security fix : CVE-2006-5601: A post-authentication stack overflow in the EAP handling could be used by already authenticated attacker to overflow a stackbuffer and so potentially execute code. %NASLMINLEVEL 70300 C...

Mandrake Linux Security Advisory : xsupplicant (MDKSA-2006:189)

Yannick Van Osselaer discovered a stack overflow in Xsupplicant, which could potentially be exploited by a remote, authenticated user to gain root priviledges. Additional code cleanups to fix potential memory leaks are also included. Updated packages have been patched to correct this issue...

CVE-2006-5601

Stack-based buffer overflow in the eapdonotify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2006-5601

CVE-2006-5601 describes a stack-based buffer overflow in the eap_do_notify function of xsupplicant’s eap.c, affecting xsupplicant before 1.2.6. The overflow could allow remote authenticated users to execute arbitrary code via unspecified vectors. The OpenVAS/Nessus entries indicate remediation th...