CVE-2012-5947

Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors...

DSquare Exploit Pack: D2SEC_C1SIZER

Name| d2secc1sizer ---|--- CVE| CVE-2012-5946 Exploit Pack| D2ExploitPack Description| IBM SPSS SamplePower c1sizer ActiveX Buffer Overflow Vulnerability Notes|...

CVE-2012-5947

IBM SPSS SamplePower 3.0 contains a vsflex7l ActiveX control vulnerability (CVE-2012-5947) that enables remote code execution when the control is invoked by Internet Explorer. The issue arises from insufficient input validation in the ActiveX component, allowing memory corruption and arbitrary co...

CVE-2012-5945

The CVE-2012-5945 issue affects IBM SPSS SamplePower for Windows (Version 3.0) through the Vsflex8l ActiveX control. The root cause is a buffer overflow in the Vsflex8l ActiveX control triggered when a long string is assigned to the ComboList or ColComboList properties, enabling remote code execu...

CVE-2012-5946

CVE-2012-5946 affects IBM SPSS SamplePower 3.0 (c1sizer.ocx) where the C1Tab ActiveX control triggers a heap/buffer overflow when handling the TabCaption string, allowing remote code execution. The IBM advisory details that the overflow occurs due to unsafe concatenation (lstrcatA) in TabCaption ...

Debian Security Advisory DSA 2665-1 (strongswan - authentication bypass)

Kevin Wojtysiak discovered a vulnerability in strongSwan, an IPsec based VPN solution. When using the OpenSSL plugin for ECDSA based authentication, an empty, zeroed or otherwise invalid signature is handled as a legitimate one. An attacker could use a forged signature to authenticate like a...

VMware Security Updates for vCenter Server (VMSA-2013-0006)

The version of VMware vCenter installed on the remote host is 5.1 prior to update 1. It therefore is potentially affected by the following vulnerabilities : - When deployed in an environment that uses Active Directory with anonymous LDAP binding enabled, VMware vCenter doesn't properly handle log...

CVE-2012-5221

CVE-2012-5221 is a directory-traversal vulnerability in the PostScript Interpreter used by a broad set of HP LaserJet printers and related devices. According to HP’s security bulletin and related sources, remote attackers could read arbitrary files via model-dependent firmware pathways, with affe...

3S CoDeSys Gateway Server Crafted Packet Stack Overflow

Added: 04/29/2013 CVE: CVE-2012-4708 BID: 58032 OSVDB: 90371 Background Smart Software Solutions GmbH 3S manufactures CoDeSys Gateway Server, a Supervisory Control and Data Acquisition/Human-Machine Interface SCADA/HMI product. The Gateway Server listens on TCP port 1211. Problem 3S CoDeSys Gatew...

[security bulletin] HPSBHF02865 SSRT101158 rev.1 - HP ElitePad 900, Secure Boot Configuration Inconsistency

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03727435 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03727435 Version: 1 HPSBHF02865...

CVE-2012-5219

Cross-site scripting XSS vulnerability in HP Managed Printing Administration MPA before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5219

HP MPA (Managed Printing Administration) before 2.7.0 is vulnerable to remote security issues. The CVE-2012-5219 entry describes a cross-site scripting (XSS) vulnerability that could allow an attacker to inject arbitrary script/HTML via unspecified vectors (NVD base score 4.3, MEDIUM). The ZDI ad...

[security bulletin] HPSBMU02830 SSRT100889 rev.2 - HP Data Protector, Local Increase of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03570121 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03570121 Version: 2 HPSBMU02830...

Ruby 安全级别限制绕过漏洞(CVE-2012-4466)

CVE ID:CVE-2012-4466 Ruby是一种为简单快捷的面向对象编程而创的脚本语言 Ruby 1.8.7 patchlevel 371之前版本，1.9.3patchlevel 286之前版本及Ruby 2.0 revision r37068之前版本存在安全漏洞，允许攻击者利用漏洞绕过安全级别限制，修改未污染字符串，如通过nameerrmesgtostr函数把字符串标记为污染。此漏洞不同于CVE-2011-1005 0 Ruby 1.8.7 Ruby 1.9.3 Ruby 2.0 厂商解决方案 用户可联系厂商获得相应的升级程序或补丁： http://www.ruby-lang....

CVE-2012-5220

CVE-2012-5220 affects HP Storage Data Protector 6.20/6.21/7.00/7.01 with a local privilege-escalation vulnerability. Root cause is described as an unspecified vulnerability allowing local users to gain privileges via unknown vectors. HP’s Security Bulletin HPSBMU02830 lists affected versions and ...

SuSE 10 Security Update : OFED (ZYPP Patch Number 8507)

rds-ping in the OFED stack could have triggered a kernel BUG, which could have caused a local denial of service attack. CVE-2012-2372 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

CVE-2012-4464

Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the 1 exctos or 2 nameerrtos API function, which marks the string as tainted, a different vulnerability than CVE-2012-4466. NOTE:...

Design/Logic Flaw

Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the 1 exctos or 2 nameerrtos API function, which marks the string as tainted, a different vulnerability than CVE-2012-4466. NOTE:...

CVE-2012-4466

CVE-2012-4466 affects Ruby 1.8.7 before patchlevel 371, Ruby 1.9.3 before patchlevel 286, and Ruby 2.0 before revision r37068. The issue allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via name_err_mesg_to_str, tainting handling for strings. This ...

CVE-2012-4464

Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 are vulnerable to a context-dependent taint bypass via exc_to_s or name_err_to_s in the exception-to-string paths, allowing modification of untainted strings and bypassing safe-level restrictions (distinct from CVE-2012-4466). Root c...