Debian DSA-3221-1 : das-watchdog - security update

Adam Sampson discovered a buffer overflow in the handling of the XAUTHORITY environment variable in das-watchdog, a watchdog daemon to ensure a realtime process won't hang the machine. A local user can exploit this flaw to escalate his privileges and execute arbitrary code as root. %NASLMINLEVEL...

Debian DLA-194-1 : das-watchdog security update

Adam Sampson discovered a buffer overflow in the handling of the XAUTHORITY environment variable in das-watchdog, a watchdog daemon to ensure a realtime process won't hang the machine. A local user can exploit this flaw to escalate his privileges and execute arbitrary code as root. NOTE: Tenable...

[SECURITY] [DLA 194-1] das-watchdog security update

Package : das-watchdog Version : 0.9.0-2+deb6u1 CVE ID : CVE-2015-2831 Debian Bug : 781806 Adam Sampson discovered a buffer overflow in the handling of the XAUTHORITY environment variable in das-watchdog, a watchdog daemon to ensure a realtime process wont hang the machine. A local user can explo...

[SECURITY] [DSA 3221-1] das-watchdog security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3221-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3221-1] das-watchdog security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3221-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 12, 2015 http://www.debian.org/security/faq -...

PT-2015-5922

Name of the Vulnerable Software and Affected Versions das watchdog version 0.9.0 Description The issue allows local users to execute arbitrary code with root privileges through a buffer overflow in the das watchdog software. This is achieved by providing a large string in the XAUTHORITY environme...

Debian Security Advisory DSA 3221-1 (das-watchdog - security update)

Adam Sampson discovered a buffer overflow in the handling of the XAUTHORITY environment variable in das-watchdog, a watchdog daemon to ensure a realtime process won OpenVAS Vulnerability Test $Id: deb3221.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3221-1 using nvtg...

Debian: Security Advisory (DSA-3221-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities

No description provided by source. My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The detailed vulnerability disclosures...

SAP NetWeaver J2EE DAS service - Unauthorized Access

Application: SAP NetWeaver JAVA Vendor URL: http://www.sap.com Bugs: Unauthorized access Reported: 20.04.2013 Vendor response: 21.04.2013 Date of Public Advisory: 15.07.2015 Reference: SAP Security Note 1945215 Authors: Alexander Polyakov ERPScan VULNERABILITY INFORMATION Class: Unauthorized Acce...

Unfixed XSS vulnerability at www.subisu.net.np

Security researcher Himanshu Kumar Das, has submitted on 06/01/2012 a cross-site-scripting XSS vulnerability affecting www.subisu.net.np, which at the time of submission ranked 225374 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. ...

CVE-2012-0711

CVE-2012-0711 is a remote code execution/privilege-escalation vulnerability in the DB2 Administration Server (DAS) of IBM DB2. The issue is a heap-based buffer overflow caused by an integer signedness error in the db2dasrrm process and affects UNIX platforms on: DB2 9.1 GA through FP11, DB2 9.5 G...

Nmap NSE net: db2-das-info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

England cricket board XSS vunrebility found by Rishabh Das !

England cricket board XSS vunrebility found by Rishabh Das ! Link :...

IBM DB2 Universal Database receiveDASMessage Buffer Overflow (CVE-2011-0594)

IBM DB2 Database is a relational database management system that includes the DB2 Administration Server DAS service. The DB2 Administration Server DAS assists the Control Center and Configuration Assistant in enabling remote administration of DB2 database instances, providing the facility for job...

CVE-2011-0731

CVE-2011-0731 describes a buffer overflow in the IBM DB2 Administration Server (DAS) component. Affected products/versions include IBM DB2 9.1 prior to FP10, 9.5 prior to FP7, and 9.7 prior to FP3 running on Linux, UNIX, and Windows. The flaw allows a remote attacker to execute arbitrary code or ...

PT-2010-5025

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP10 IBM DB2 versions 9.5 before FP6a IBM DB2 versions 9.7 before FP3 Description The issue is related to a stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd functi...

PT-2010-5044

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM FastBack versions 5.5.0.0 through 5.5.6.0 IBM Tivoli Storage Manager TSM FastBack versions 6.1.0.0 through 6.1.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL...

iOS Impact PDF Reader 2.0 - POST Method Remote Denial of Service

Exploit: Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/impact-pdf-reader/id322140783?mt=8 Version: 2.0, 1.2 Tested on: iPod 2G with iOS...

Safari On iPhone / iPod Touch Denial Of Service

Exploit Title: Remote DoS on Safari for iPhone & iPod Touch Date: 26/03/2010 Author: Nishant Das Patnaik For more of Nishant's research, please visit: http://nishantdaspatnaik.yolasite.com/research.php Tested on: iPod Touch 3G iPhone OS 3.1.3 Description: An attacker may direct the user to visit ...