2847 matches found
Debian DSA-2413-1 : libarchive - buffer overflows
Two buffer overflows have been discovered in libarchive, a library providing a flexible interface for reading and writing archives in various formats. The possible buffer overflows while reading ISO 9660 or tar streams allow remote attackers to execute arbitrary code depending on the application...
ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability. EMC Identifier: ESA-2012-009 EMC Identifier: CS-16072 EMC Identifier: CS-16073 CVE Identifier: CVE-2011-4144 Severity Rating: CVSS v2 Base Score: 6.8...
Debian Security Advisory DSA 2263-2 (movabletype-opensource)
The remote host is missing an update to movabletype-opensource announced via advisory DSA 2263-2. OpenVAS Vulnerability Test $Id: deb22632.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2263-2 movabletype-opensource Authors: Thomas Reinke Copyright:...
Microsoft IIS 6.0 DOS设备请求安全限制绕过漏洞
BUGTRAQ ID: 51527 CVE ID: CVE-2007-2897 Internet Information Services（IIS，互联网信息服务）是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。 IIS 6.0在请求特制路径时存在拒绝服务漏洞，远程攻击者可利用此漏洞使应用程序挂起或泄漏敏感信息，物理接触系统的攻击者可以当前用户权限执行任意代码。 0 Microsoft IIS 6.0 厂商补丁： Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Debian DSA-2393-1 : bip - buffer overflow
Julien Tinnes reported a buffer overflow in the Bip multiuser IRC proxy which may allow arbitrary code execution by remote users. The oldstable distribution lenny is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Debian DSA-2392-1 : openssl - out-of-bounds read
Antonio Martin discovered a denial-of-service vulnerability in OpenSSL, an implementation of TLS and related protocols. A malicious client can cause the DTLS server implementation to crash. Regular, TCP-based TLS is not affected by this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
IBM WebSphere Application Server Hash Collisions DOS Vulnerability
The host is running IBM WebSphere Application Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmwashashcollisionsdosvuln.nasl 5940 2017-04-12 09:02:05Z teissa $ IBM WebSphere Application Server Hash Collisions DOS Vulnerability Authors: Antu Sanadi...
IBM WebSphere Application Server Hash Collisions DoS Vulnerability (Jan 2012)
IBM WebSphere Application Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
tomcat: Multiple weaknesses in HTTP DIGEST authentication
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weak...
DSA-2389-1 linux-2.6 - several
Bulletin has no description...
linux/x86 shellcode - setuid(0)+setgid(0)+add user iph without password - 124 bytes
/ Exploit Title: Linux/x86 Polymorphic ShellCode - setuid0+setgid0+add user 'iph' without password to /etc/passwd setuid - setgid - open - write - close - exit Date: 30/12/2011 Author: pentesters.ir Tested on: Linux x86 - CentOS 6.0 - 2.6.32-71 Website: http://pentesters.ir/ Contact:...
CVE-2011-1378
IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File UAF data, which allows local users to kill listener processes and the command server via a control command...
Debian DSA-2344-1 : python-django-piston - deserialization vulnerability
It was discovered that the Piston framework can deserializes untrusted YAML and Pickle data, leading to remote code execution CVE-2011-4103 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
Microsoft Windows TCP/IP Stack Reference Counter Integer Overflow Vulnerability
Description Microsoft Windows is prone to a remote integer-overflow vulnerability that affects the TCP/IP stack. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts ma...
WHMCompleteSolution 3.x/4.x - Multiple Vulnerabilities
$b0x WHMCS WHMCompleteSolution 3.x / 4.x Multiple Vulnerability ! $b0x ZxH-Labs $b0x 1st-NOV-11 $b0x Www.Sec4ever.coM $b0x WH-03 On Windows IIS 6.0 ======================================================== b0x@1337b0x:/b0x/Exploits/WebAPP whoami ZxH-Labs | Www.Sec4ever.coM...
Microsoft Internet Explorer Option Element CVE-2011-1996 Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aur...
Mozilla Firefox 6.0 Multiple Vulnerabilities
Binary data 801285.prm...
SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities
Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...
Fedora 15 : firefox-6.0-1.fc15 / gnome-python2-extras-2.25.3-33.fc15 / mozvoikko-1.9.0-6.fc15 / etc (2011-11106)
Update to new upstream Firefox version 6.0, fixing multiple security issues detailed in the upstream advisory : - http://www.mozilla.org/security/announce/2011/mfsa2011-2 9.html This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner...