9892 matches found
HP OpenView Network Node Manager multiple security vulnerabilities
Buffer overflows, format string vulnerabilities, DoS conditions on TCP/2953, TCP/2954 traffic parsing...
hpopenview-multi.txt
Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physical network, virtual network services and the complex relationships betwe...
HP OpenView NNM 7.53 Multiple Remote Vulnerabilities
No description provided by source. Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bugs: A format string in ovalarmsrv...
HP OpenView NNM 7.53 Multiple Remote Vulnerabilities
Exploit for unknown platform in category dos / poc ==================================================== HP OpenView NNM 7.53 Multiple Remote Vulnerabilities ==================================================== Luigi Auriemma Application: HP OpenView Network Node Manager...
HP OpenView Network Node Manager (OV NNM) 7.53 - Multiple Vulnerabilities
HP OpenView Network Node Manager OV NNM 7.53 - Multiple Vulnerabilities Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physic...
HP OpenView Network Node Manager (OV NNM) 7.53 - Multiple Vulnerabilities
Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physical network, virtual network services and the complex relationships betwe...
Xitami Web Server v2.5c2 LRWP Processing Format String PoC
No description provided by source. / PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug Advisory is available at: http://www.bratax.be/advisories/b013.html multiple vulnerabilities! check it out! @author: bratax @url: http://www.bratax.be/ @email: [email protected] Thanks t...
Xitami Web Server 2.5c2 - LRWP Processing Format String (PoC)
Xitami Web Server 2.5c2 - LRWP Processing Format String PoC / PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug Advisory is available at: http://www.bratax.be/advisories/b013.html multiple vulnerabilities! check it out! @author: bratax @url: http://www.bratax.be/ @email:...
Xitami Web Server v2.5c2 LRWP Processing Format String PoC
Exploit for unknown platform in category dos / poc ========================================================== Xitami Web Server v2.5c2 LRWP Processing Format String PoC ========================================================== / PoC exploit for Xitami Web Server v2.5c2 LRWP processing format...
McAfee Common Management Agent 3.6.0 UDP Packet Handling Format String (credentialed check)
The remote host is running a Common Management Agent, a component of the ePolicy Orchestrator system security management solution from McAfee. The version of the Common Management Agent on the remote host is earlier than 3.6.0.595 and, as such, contains a format string vulnerability. If configure...
Xitami Web Server 2.5c2 - LRWP Processing Format String (PoC)
/ PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug Advisory is available at: http://www.bratax.be/advisories/b013.html multiple vulnerabilities! check it out! @author: bratax @url: http://www.bratax.be/ @email: [email protected] Thanks to BuzzDee for learning me how to us...
McAfee Common Management Agent < 3.6.0.595 UDP Packet Handling Format String
According to its banner, the version of McAfee Common Management Agent CMA running on the remote host is prior to 3.6.0.595. It is, therefore, affected by a flaw in the logDetail function of applib.dll due to calling vsnwprintf without the needed format string argument. An unauthenticated, remote...
IBM solidDB格式串及拒绝服务漏洞
BUGTRAQ ID: 28468 IBM solidDB是可实现电信级性能的关系数据库。 solidDB的日志函数中存在格式串处理漏洞，如果用户使用了畸形的用户或对等端名称的话，就可能向日志中写入恶意脚本或命令并在管理员查看日志时执行。 solidDB服务器使用了客户端所提供的32位数字作为读取数组中某些值的索引，如果设置了很多数字的话，就可能访问无效内存，导致服务器崩溃。 如果用户向服务器发送了特制报文的话，就可能触发空指针引用，或通过分配一定数量的内存导致Out of central memory错误消息，服务器会终止。 IBM solidDB = 06.00.1018 IBM -...
IBM SolidDB database server multiple security vulnerabilities
Format string vulnerability in logging function, multiple DoS conditions...
Multiple vulnerabilities in solidDB 06.00.1018
Luigi Auriemma Application: IBM solidDB http://www.solidtech.com/en/products/relationaldatabasemanagementsoftware/embed.asp Versions: = 06.00.1018 Platforms: Windows tested, Solaris, AIX, HP-UX and Linux Bugs: A format string in logging function B crash caused by arbitrary array index C NULL...
Debian Security Advisory DSA 1525-1 (asterisk)
The remote host is missing an update to asterisk announced via advisory DSA 1525-1. OpenVAS Vulnerability Test $Id: deb15251.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1525-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
IBM solidDB 6.0.10 - Format String Denial of Service
IBM solidDB 6.0.10 - Format String Denial of Service source: https://www.securityfocus.com/bid/28468/info IBM solidDB is prone to a format-string vulnerability affecting the logging function and three denial-of-service vulnerabilities. Attackers can exploit these issues to execute arbitrary code ...
IBM solidDB 6.0.10 - Format String / Denial of Service
source: https://www.securityfocus.com/bid/28468/info IBM solidDB is prone to a format-string vulnerability affecting the logging function and three denial-of-service vulnerabilities. Attackers can exploit these issues to execute arbitrary code or to deny service to legitimate users. solidDB...
VLC Media Player network/httpd.c httpd_FileCallBack Function Connection Parameter Format String
The remote host is running VLC, a popular media player application which can have an embedded web server. The remote version of this software is vulnerable to a format string attack when processing a malformed 'Connection:' http header. An attacker can exploit this flaw to execute arbitrary...