120 matches found
Fedora 18 : xen-4.2.3-12.fc18 (2013-23466)
IOMMU TLB flushing may be inadvertently suppressed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 19 : xen-4.2.3-12.fc19 (2013-23457)
IOMMU TLB flushing may be inadvertently suppressed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
CVE-2013-6400
Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses IOMMU TLB flushes when unspecified errors occur, which causes the TLB entries to not be flushed and allows local guest administrators to cause a denial of service host crash or...
CVE-2013-6400
CVE-2013-6400 affects Xen 4.2.x and 4.3.x when Intel VT-d is used and a PCI device is assigned. The root cause is failure to clear a flag that suppresses IOMMU TLB flushes on unspecified errors, causing TLB entries to not be flushed. This can allow a local guest administrator to crash the host or...
ClanSuite 2.9 Shell Upload
Exploit Title: ClanSuite 2.9 Arbitrary File Upload Date: 29/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://clansuite.com/ Software Link : https://github.com/jakoch/Clansuite or : http://svn.gna.org/svn/clansuite/trunk/ Version: 2.9 and Trunk Revision 6400 Vuln page :...
CVE-2010-0549
Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...
CVE-2010-0549
The CVE-2010-0549 entry affects Xerox WorkCentre 6400 Series (System Software 060.070.109.11407–060.070.109.29510) and Net Controller (060.079.11410–060.079.29310). A vulnerability in the Network Controller allows remote attackers to access the device’s directory structure by sending a crafted Po...
Fedora Core 10 FEDORA-2009-6400 (mingw32-libpng)
The remote host is missing an update to mingw32-libpng announced via advisory FEDORA-2009-6400. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
MDVA-2008:059 : drakx-kbd-mouse-x11
An updated XFdrake is available that corrects a number of bugs: - never write a ModeLine when using the fglrx driver bug 30934 - if the EDID gives a valid EISAID, a valid 16/10 preferred resolution, but no HorizSync/VertRefresh, use a generic flat panel HorizSync/VertRefresh needed for...
CVE-2008-6400
Cross-site scripting XSS vulnerability in refbase before 0.9.5 allows remote attackers to inject arbitrary web script or HTML via the headerMsg parameter to 1 show.php and 2 search.php. NOTE: some of these details are obtained from third party information...
CVE-2008-6400
The connected records confirm CVE-2008-6400 is a Cross-site Scripting (XSS) vulnerability in refbase up to version 0.9.4/0.9.5 (before 0.9.5). The issue arises via the headerMsg parameter used by show.php and search.php , allowing remote attackers to inject arbitrary web script/HTML. The root cau...
CVE-2007-6400
CVE-2007-6400 affects PolDoc CMS (aka PDDMS) 0.96 in download_file.php. The vulnerability is a directory traversal flaw that lets remote attackers read arbitrary files by supplying a .. or absolute path in the filename parameter. This exposes partial confidentiality (per the CVSS 2.0 entry: AV:N/...
CVE-2006-6400
CVE-2006-6400 affects JustSystems Hanako family and related Ichitaro components (Hanako 2004–2006, Hanako viewer 1.x, Ichitaro 2004–2005, Ichitaro Lite2, Ichitaro viewer 4.x, Sanshiro 2005). The root cause is a buffer overflow in string length handling affecting the 1) Keyword and 2) Title fields...
Cisco 6400 NRP2 Unauthenticated Telnet Access (CSCdt65960)
The Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 module allows Telnet access when no password has been set. The correct response is to disallow any remote access to the module until the password has been set. This vulnerability may result in users gaining unintended access to secure...
CVE-2001-0757
Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet...
CVE-2001-0757
Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet...
Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) module permits telnet access when no password has been set
Overview The Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 module permits unauthenticated telnet access when no password has been set. Description The Access Concentrator Node Route Processor is a router blade for the Cisco 6400. It's purpose is to aggregate and terminate incoming...
Cisco Security Advisory: Cisco 6400 NRP2 Telnet Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco 6400 NRP2 Telnet Vulnerability ============================================================================== Revision 1.0 For Public Release 2001 June 14 at 1500 UTC...
