Changetrack Local Privilege Escalation Vulnerability

This host has Changetrack installed and is prone to Local Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodchangetrackprivescalationvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Changetrack Local Privilege Escalation Vulnerability Authors: Sharath S Copyright: Copyright c...

SuSE9 Security Update : pam_mount (YOU Patch Number 12332)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : pam_mount (ZYPP Patch Number 5911)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : perl-DBI (YOU Patch Number 9838)

This update fixes insecure temp. file handling. CVE-2005-0077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41346; scriptversion"1.9";...

FreeBSD : fwbuilder -- security issue in temporary file handling (113cd7e9-a4e2-11de-84af-001195e39404)

Firewall Builder release notes reports : Vadim Kurland [email protected] reports : Fwbuilder and libfwbuilder 3.0.4 through to 3.0.6 generate iptables scripts with a security issue when also used to generate static routing configurations. %NASLMINLEVEL 70300 C Tenable Network Security,...

HTMLDOC 1.8.27 - .html File Handling Stack Buffer Overflow

HTMLDOC 1.8.27 - .html File Handling Stack Buffer Overflow / HTMLDOC 'html' File Handling Remote Stack Buffer Overflow Exploit Linux Reference: https://www.securityfocus.com/bid/35727 Tested on HTMLDOC 1.8.27 on Debian 5.0 +ASLR Credit: ANTHRAX666 for finding the vulnerability Coded by Pankaj Koh...

HTMLDOC 1.8.27 - '.html' File Handling Stack Buffer Overflow

/ HTMLDOC 'html' File Handling Remote Stack Buffer Overflow Exploit Linux Reference: https://www.securityfocus.com/bid/35727 Tested on HTMLDOC 1.8.27 on Debian 5.0 +ASLR Credit: ANTHRAX666 for finding the vulnerability Coded by Pankaj Kohli http://www.pank4j.com pankaj@zion:/test/htmldoc$ cat...

CVE-2009-1546

Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, ...

Google SketchUp Pro 7.0 - '.skp' Remote Stack Overflow (PoC)

/ Title: Google SketchUp Pro 7.0 Model File Handling Remote Stack Overflow PoC Vendor: Google Inc. http://www.google.com Product Web Page: http://www.sketchup.com http://sketchup.google.com Current Version: 7.0.10247 Summary: Google SketchUp Pro 7 is a suite of powerful features and applications...

openSUSE Security Update : pam_mount (pam_mount-427)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 script was disabled for 11.0 and 11.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : pam_mount (pam_mount-427)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 script was disabled for 11.0 and 11.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

[oCERT-2009-010] mimeTeX and mathTeX buffer overflows and command injection

2009-010 mimeTeX and mathTeX buffer overflows and command injection Description: The mimeTeX and mathTeX CGIs are widely used helper executables that allow mathematical equation rendering in the form of images. Both applications suffer from several buffer overflows as well as command injection...

Mozilla Firefox 3.0.11 and Thunderbird 2.0.9 - RDF File Handling Remote Memory Corruption

Mozilla Firefox 3.0.11 and Thunderbird 2.0.9 - RDF File Handling Remote Memory Corruption source: https://www.securityfocus.com/bid/35775/info Mozilla Firefox and Thunderbird are prone to a remote memory-corruption vulnerability that attackers can exploit to cause denial-of-service conditions and...

CVE-2009-1716

CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, which allows local users to obtain sensitive information by reading these files...

ImageMagick < 6.5.2-9 magick/xwindow.c XMakeImage() Function TIFF File Handling Overflow

The remote Windows host is running a version of ImageMagick earlier than 6.5.2-9. Such versions reportedly fail to properly handle malformed 'TIFF' files in the 'XMakeImage' function. If an attacker can trick a user on the remote host into opening a specially crafted file using the affected...

Winamp < 5.552 Modern Skins Support Module (gen_ff.dll) MAKI File Handling Overflow

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.552. Such versions are reportedly affected by an integer overflow vulnerability when processing '.maki' files. An attacker could exploit this to execute arbitrary co...

RealNetworks RealPlayer Gold 10.0 MP3 - File Handling Remote Denial of Service

RealNetworks RealPlayer Gold 10.0 MP3 - File Handling Remote Denial of Service source: https://www.securityfocus.com/bid/34719/info RealNetworks RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files. Exploiting this issue...

Mandriva Update for curl MDVA-2008:159 (curl)

Check for the Version of curl OpenVAS Vulnerability Test Mandriva Update for curl MDVA-2008:159 curl Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

RHEL 3 / 4 : php (RHSA-2009:0337)

Updated php packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

Moderate: Red Hat Security Advisory: php security update

Updated php packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...