libupnp Multiple Buffer Overflow Vulnerabilities

Updates are available. Please see the references for more information. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

libupnp Multiple Buffer Overflow Vulnerabilities (TCP)

Updates are available. Please see the references for more information. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2012-5965

creationtimestamp| type| source ---|---|--- 2013-02-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24455...

[SECURITY] [DSA 2615-1] libupnp4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2615-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez February 01, 2013 http://www.debian.org/security/faq -...

Portable SDK for UPnP Devices (libupnp) < 1.6.18 Multiple Stack-based Buffer Overflows RCE

According to its banner, the version of Portable SDK for UPnP Devices libupnp running on the remote host is prior to 1.6.18. It is, therefore, affected by multiple remote code execution vulnerabilities : - A stack-based buffer overflow condition exists in the uniqueservicename function within fil...

CVE-2012-5965

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType aka urn device field in a U...

CVE-2012-5965

CVE-2012-5965 describes a stack-based buffer overflow in the unique_service_name() function of the SSDP parser within the Portable SDK for UPnP Devices (libupnp), specifically in the open-source UPnP library (libupnp) version 1.3.1. The vulnerability can be triggered by a long DeviceType (urn dev...

Fedora Update for qt4 FEDORA-2007-4354

Check for the Version of qt4 OpenVAS Vulnerability Test Fedora Update for qt4 FEDORA-2007-4354 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for qt4 FEDORA-2007-4354

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-5965

The vulnerability CVE-2008-5965 affects LokiCMS 0.3.4 and earlier. A directory traversal flaw exists in index.php that, when magic_quotes_gpc is disabled, allows remote attackers to probe for the existence of arbitrary files by injecting .. into the page parameter. The NVD entry documents a MEDIU...

CVE-2008-5965

creationtimestamp| type| source ---|---|--- 2008-10-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6737...

openSUSE 10 Security Update : libqt4 (libqt4-4790)

A bug in the QSslSocket class could under certain circumstances lead to incorrect SSL certificates beeing accepted as valid CVE-2007-5965. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2007-5965

QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user...

CVE-2007-5965

CVE-2007-5965 affects Trolltech Qt 4.3.0–4.3.2, where QSslSocket does not correctly verify SSL certificates. This can allow remote attackers to trick users into accepting an invalid server certificate for a spoofed service or cause a service to accept an invalid client certificate (I) as describe...

Trolltech Qt QSslSocket类证书验证绕过安全限制漏洞

BUGTRAQ ID: 27112 CVECAN ID: CVE-2007-5965 Qt是一款C++应用开发工具，包括类库和跨平台开发工具。 Qt可能没有对SSL连接中的QSslSocket类证书执行验证，使用QSslSocket的应用可能受骗接受伪造的证书，这有助于攻击者执行网络钓鱼类的攻击。 Trolltech Qt 4.3.2 Trolltech Qt 4.3.1 Trolltech Qt 4.3.0 Trolltech --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Fedora 8 : qt4-4.3.3-1.fc8 (2007-4285)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : qt4-4.3.3-1.fc7 (2007-4354)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

CVE-2006-5965

PassGo SSO Plus 2.1.0.32 (and possibly earlier) is affected by insecure default permissions on the PassGo Technologies directory, granting Everyone/Full Control. Local users can exploit this to modify critical program files and escalate privileges. The issue stems from overly permissive directory...

Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions

====================================================================== Secunia Research 22/11/2006 - PassGo SSO Plus Insecure Default Directory Permissions - ====================================================================== Table of Contents Affected...