Oracle Outside In MDB - File Parsing Stack Buffer Overflow (PoC)

Oracle Outside In MDB - File Parsing Stack Buffer Overflow PoC !/usr/bin/python Exploit Title: Oracle Outside In MDB File Parsing Stack Based Buffer Overflow PoC Date: 16th January 2014 PoC Author: Citadelo Vendor Homepage: http://www.oracle.com Software Link:...

Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)

A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats. The vulnerability is due to an error while processing Microsoft Access 1.x database files .mdb. This vulnerability can be exploited by causing an application that uses the...

CVE-2013-5791

CVE-2013-5791 is a stack-based buffer overflow in Oracle Outside In Technology’s Microsoft Access 1.x database file parser used by IBM Content Manager/Content Foundation and related IBM products. The vulnerability allows code execution or denial of service when processing crafted MDB files; IBM d...

CVE-2012-5791

CVE-2012-5791 concerns PayPal Invoicing, where the SSL/TLS hostname verification is not performed against the certificate’s CN or subjectAltName. This allows MITM attackers to spoof SSL servers by presenting a valid certificate. The provided records describe the issue and its impact (partial conf...

CVE-2008-5791

Technical details about CVE-2008-5791 are not publicly available in the provided documents. No concrete affected products, components, versions, or remediation are specified. Monitor for updates from the connected sources.

CVE-2009-1277

creationtimestamp| type| source ---|---|--- 2008-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5791 2009-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8350...

Debian: Security Advisory (DSA-1242-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5791

The CVE-2007-5791 entry concerns the Vonage Motorola Phone Adapter VT 2142-VD failing to verify that SIP INVITE messages originate from a legitimate server, enabling remote attackers to spoof INVITEs. This can trigger a flood of messages causing a denial of service and may facilitate calls with m...

[SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1242-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27th, 2006 http://www.debian.org/security/faq -...

DSA-1242-1 elog

Bulletin has no description...

CVE-2006-5791

Multiple cross-site scripting XSS vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the filename for downloading, which is not quoted in an error message by the sendfiledirect function, and 2 the Type or Category values in a N...

CVE-2006-5791

CVE-2006-5791 affects the elog web-based logbook (ELOG 2.6.2 and earlier). The vulnerability arises from cross-site scripting in elogd.c, specifically via the download filename in send_file_direct and the Type/Category fields in New entries, allowing remote attackers to inject arbitrary HTML/scri...

CVE-2006-5791

Removed by vendor...