SSH Explorer v1.97 - Denial of Service Vulnerability

Document Title: =============== SSH Explorer v1.97 - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=326 CNNVD-201112-149 Release Date: ============= 2011-11-19 Vulnerability Laboratory ID VL-ID:...

SSH Explorer v1.97 - Denial of Service Vulnerability

Document Title: =============== SSH Explorer v1.97 - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=326 CNNVD-201112-149 Release Date: ============= 2011-11-19 Vulnerability Laboratory ID VL-ID:...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerability (2617657)

This host has moderate security update missing according to Microsoft Bulletin MS11-084. OpenVAS Vulnerability Test $Id: secpodms11-084.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerability 2617657 Authors: Antu Sanadi Copyright: Copyright c 2011...

OpenPAM - 'pam_start()' Local Privilege Escalation

source: https://www.securityfocus.com/bid/50607/info OpenPAM is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of affected...

Linux Kernel 3.0.4 - '/proc/interrupts' Password Length Local Information Disclosure

/ source: https://www.securityfocus.com/bid/50573/info The Linux kernel is prone to a local information-disclosure weakness. Successful exploits allow local attackers to obtain the password length of a victim's account; information harvested may aid in further attacks. Linux kernel 3.1 and prior...

CentOS 5 : ecryptfs-utils (CESA-2011:1241)

Updated ecryptfs-utils packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Apple Mac OSX (Lion) - Directory Services Security Bypass

Apple Mac OSX Lion - Directory Services Security Bypass source: https://www.securityfocus.com/bid/49676/info Apple Mac OS X Lion is prone to multiple security-bypass vulnerabilities. Local attackers can exploit these issues to obtain sensitive information or change the password of other users on...

Apple Mac OSX (Lion) - Directory Services Security Bypass

source: https://www.securityfocus.com/bid/49676/info Apple Mac OS X Lion is prone to multiple security-bypass vulnerabilities. Local attackers can exploit these issues to obtain sensitive information or change the password of other users on the computer, without sufficient privileges. $ dscl...

WebWatchBot Monitor 5.1.16 - Divide Zero Vulnerability

Document Title: =============== WebWatchBot Monitor 5.1.16 - Divide Zero Vulnerability Release Date: ============= 2011-09-05 Vulnerability Laboratory ID VL-ID: ==================================== 7 Common Vulnerability Scoring System: ==================================== 3.5 Product & Service...

Skype 2.8.x & 5.3.x - Memory Corruption Vulnerability

Document Title: =============== Skype 2.8.x & 5.3.x - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=180 CNNVD-201110-710 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100710 Release Date: ============= 2011-08-22...

UltraFXP v1.07 - Memory Corruption Vulnerability

Document Title: =============== UltraFXP v1.07 - Memory Corruption Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 161 Product & Service Introduction: =============================== FTP-Client / FXP-Client...

iGuard V2.81 Player - Critical Pointer Vulnerability

Document Title: =============== iGuard V2.81 Player - Critical Pointer Vulnerability Release Date: ============= 2011-08-06 Vulnerability Laboratory ID VL-ID: ==================================== 106 Product & Service Introduction: =============================== Die Fähigkeit, Ihren Kunden...

SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability

Document Title: =============== SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 127 Product & Service Introduction: =============================== SmartFTP is an FTP File...

SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability

Document Title: =============== SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 127 Product & Service Introduction: =============================== SmartFTP is an FTP File...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2555917)

This host is missing an important security update according to Microsoft Bulletin MS11-054. OpenVAS Vulnerability Test $Id: secpodms11-054.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2555917 Authors: Sooraj KS Copyright: Copyright c 20...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7568)

This kernel update for the SUSE Linux Enterprise 10 SP3 kernel fixes several security issues and bugs. The following security issues were fixed : - Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel allowed local users to cause a denial of service system cra...

SuSE 11.1 Security Update : libgssglue (SAT Patch Number 4620)

This update fixes insecure getenv usage in libgssglue, which could be used under some circumstances by local attackers do gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update informatio...

SuSE 10 Security Update : libgssapi (ZYPP Patch Number 7544)

This update fixes insecure getenv usage, which could be used under some circumstances by local attackers do gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Ubuntu 9.10 / 10.04 LTS / 10.10 : policykit-1 vulnerability (USN-1117-1)

Neel Mehta discovered that PolicyKit did not correctly verify the user making authorization requests. A local attacker could exploit this to trick pkexec into running applications with root privileges. Note that Tenable Network Security has extracted the preceding description block directly from...

openSUSE Security Update : kernel (openSUSE-SU-2011:0346-1)

This update of the openSUSE 11.2 kernel fixes lots of security issues. Following security issues were fixed: CVE-2011-1493: In the rose networking stack, when parsing the FACNATIONALDIGIS facilities field, it was possible for a remote host to provide more digipeaters than expected, resulting in...