CVE-2016-8971

IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box having to be rebooted to resume normal operations. IBM Reference : 1998663...

Code injection

IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box having to be rebooted to resume normal operations. IBM Reference : 1998663...

CVE-2016-8971

IBM WebSphere MQ 8.0 is affected by CVE-2016-8971. An authenticated user with queue manager permissions could run management commands that access invalid memory, causing a segmentation fault and making the queue manager unresponsive until a reboot. The IBM security bulletin confirms the vulnerabi...

Debian DSA-3801-1 : ruby-zip - security update

It was discovered that ruby-zip, a Ruby module for reading and writing zip files, is prone to a directory traversal vulnerability. An attacker can take advantage of this flaw to overwrite arbitrary files during archive extraction via a .. dot dot in an extracted filename. %NASLMINLEVEL 70300 C...

Debian DSA-3800-1 : libquicktime - security update

Marco Romano discovered that libquicktime, a library for reading and writing QuickTime files, was vulnerable to an integer overflow attack. When opened, a specially crafted MP4 file would cause a denial of service by crashing the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

CVE-2017-6405

Veritas NetBackup products (NetBackup 8.0 and earlier; NetBackup Appliance 3.0 and earlier) are affected by a DNS spoofing vulnerability due to hostname-based security. The connected documents confirm the issue but do not provide exploit details or remediation steps within the provided content.

CVE-2016-9009

IBM WebSphere MQ CVE-2016-9009 allows an authenticated user with authority to create a cluster object to cause a denial of service in an MQ cluster. IBM’s bulletin describes that a cluster receiver channel definition could be altered, leading to corruption of cluster repository information and po...

CVE-2016-4492

Buffer overflow in the dotype function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary...

IBM WebSphere MQ Denial of Service Vulnerability (CNVD-2017-02457)

IBM WebSphere MQ is a messaging middleware product from IBM, USA. A security vulnerability exists in IBM WebSphere MQ version 8.0, which can be exploited by remote attackers to submit a special request and conduct a denial-of-service attack...

Design/Logic Flaw

IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to other channels running under the same process. IBM Reference : 1998649...

CVE-2016-3013

IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference : 1998661...

CVE-2016-8986

CVE-2016-8986 affects IBM WebSphere MQ, allowing an authenticated user with access to the queue manager to bring down MQ channels via specially crafted HTTP requests. The vulnerability is documented with CVSS v3.0 base score 6.5 (vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) and CVSS v2.0...

CVE-2016-3013

CVE-2016-3013 affects IBM WebSphere MQ 8.0 and earlier fixpacks; authenticated users can crash an MQ channel due to improper data conversion handling. IBM Security Bulletin entries describe affected versions (e.g., 8.0.0.5 and earlier), and remediation requires applying later maintenance levels: ...

CVE-2016-8915

CVE-2016-8915 affects IBM WebSphere MQ. The IBM security bulletin describes that an authenticated user with access to the queue manager and queue could cause denial of service to other channels running under the same MCA process. Affected products/versions include IBM WebSphere MQ on HP-UX (V8.0....

CVE-2016-3013

IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference : 1998661...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2017:0460-1)

This update for java-180-ibm to version 8.0-4.0 fixes a lot of security issues bsc1024218: Following CVEs are fixed: CVE-2016-5552 CVE-2017-3231 CVE-2017-3241 CVE-2017-3253 CVE-2017-3259 CVE-2017-3261 CVE-2017-3272 CVE-2017-3289 CVE-2016-2183 CVE-2016-5547 CVE-2016-5548 CVE-2016-5549 CVE-2017-325...

CVE-2017-1121

The CVE-2017-1121 issue is a cross-site scripting vulnerability in IBM WebSphere Application Server, enabling arbitrary JavaScript in the Web UI and potentially credential disclosure within a trusted session. Affected products include WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 (...

Debian DSA-3784-1 : viewvc - security update

Thomas Gerbet discovered that viewvc, a web interface for CVS and Subversion repositories, did not properly sanitize user input. This problem resulted in a potential Cross-Site Scripting vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian DSA-3777-1 : libgd2 - security update

Multiple vulnerabilities have been discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-3778-1 : ruby-archive-tar-minitar - security update

Michal Marek discovered that ruby-archive-tar-minitar, a Ruby library that provides the ability to deal with POSIX tar archive files, is prone to a directory traversal vulnerability. An attacker can take advantage of this flaw to overwrite arbitrary files during archive extraction via a .. dot do...