CA ARCserve Backup Message Engine Denial of Service (CVE-2009-1761)

Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. A denial of service vulnerability exists in CA ARCserve Backup Message Engine. The vulnerability exists in CA ARCserve Message Engine. The vulnerability is due to insufficient...

openSUSE Security Update : kvm (kvm-412)

Rogue VNC clients could make the built in VNC server of kvm run into an infinite loop CVE-2008-2382 An off-by-one bug limited the length of VNC passwords to seven instead of eight CVE-2008-5714 Virtualized guests could potentially execute code on the host by triggering a buffer overflow in the...

openSUSE Security Update : krb5 (krb5-740)

Clients sending negotiation requests with invalid flags could crash the kerberos server CVE-2009-0845. GSS-API clients could crash when reading from an invalid address space CVE-2009-0844. Invalid length checks could crash applications using the kerberos ASN.1 parser CVE-2009-0847. Under certain...

Rasterbar libtorrent arbitrary file overwrite vulnerability

'libtorrent' is an open-source C++ bittorrent library by Rasterbar Software that is used in many desktop applications and embedded devices. Popular BitTorrent clients that use this library are 'firetorrent', 'qBittorrent' and 'deluge Torrent'. For a more comprehensive list of libtorrent-based...

OnlineRent 5.0 SQL Injection

---------------------------------------------------------------\ \ / / OnlineRent v5.0 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : UnderTaker HaCkEr Dork : A© MY LTD 2008 . ALL RIGHTS RESERVED Dork2 : allintitle:V45 TEMPLATE Vendor :...

Online Rental Property Script 5.0 - pid SQL Injection

Online Rental Property Script 5.0 - pid SQL Injection ---------------------------------------------------------------\ \ / / OnlineRent v5.0 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : UnderTaker HaCkEr Dork : A© MY LTD 2008 . ALL RIGHTS...

RHEL 5 : kernel (RHSA-2009:0473)

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Linkubator XSS / SQL Injection

+=================================================================+ xTitle : linkubator catid Blind Sql & xss Injection Vulnerability xSoftware : linkubator xDescription : Free Link Exchange for Clients & Friends of Green Web Design xVendor : http://www.linkubator.ws xVersion : unknown xDate : 26...

Mandriva Linux Security Advisory : nfs-utils (MDVSA-2009:060)

A security vulnerability has been identified and fixed in nfs-utils, which caused TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions CVE-2008-4552. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Update for nfs-utils MDVA-2008:071 (nfs-utils)

Check for the Version of nfs-utils OpenVAS Vulnerability Test Mandriva Update for nfs-utils MDVA-2008:071 nfs-utils Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for x11-server MDVA-2008:117 (x11-server)

Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVA-2008:117 x11-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Fixed in Apache Tomcat JK Connector 1.2.27

Important: Information disclosure CVE-2008-5519 Situations where faulty clients set Content-Length without providing data, or where a user submits repeated requests very quickly, may permit one user to view the response associated with a different user's request. This was fixed in revision 702540...

Ubuntu Update for ekg, libgadu vulnerability USN-692-1

Ubuntu Update for Linux kernel vulnerabilities USN-692-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6921.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ekg, libgadu vulnerability USN-692-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

IBM ISS: Adobe JBIG2 exploits being spammed out

PDFs containing exploits for the recent 0-day vulnerability in Acrobat Reader are now being actively sent out through spambots. The folks at the IBM ISS X-Force say they’re seeing infected PDFs being spammed out and that it looks like the traffic is mainly coming from Taiwan, though those may be...

Buffer overflow

Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service persistent game disruption or possibly execute arbitrary code via vectors involving many long names for "companies and clients."...

NextApp Echo < 2.1.1 - XML Injection

SEC Consult Security Advisory ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 2.1.1 homepage: http://echo.nextapp.com/site/echo2 found: Feb. 2008 by: Anonymous / SEC Consult...

RedHat Update for openldap RHSA-2008:0110-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2008:0110-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for squid FEDORA-2007-4170

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2007-4170 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Debian Security Advisory DSA 1719-1 (gnutls13)

The remote host is missing an update to gnutls13 announced via advisory DSA 1719-1. OpenVAS Vulnerability Test $Id: deb17191.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1719-1 gnutls13 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

UltraVNC/TightVNC (Multiple VNC Clients) - Multiple Integer Overflows (PoC)

!/usr/bin/env python POC: Multiple VNC Clients Multiple Integer Overflow VulnerabilitiesUltraVNC and TightVNC, BID 33568 Author: Andres Lopez Luksenberg Visit: http://208.66.16.113/andres/ import socket serversocket = socket.socketsocket.AFINET, socket.SOCKSTREAM serversocket.bind'', 5900...