2431 matches found
Fedora Update for synce-gnomevfs FEDORA-2008-0680
Check for the Version of synce-gnomevfs OpenVAS Vulnerability Test Fedora Update for synce-gnomevfs FEDORA-2008-0680 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Nokia MultiMedia Player 1.1 - '.m3u' Heap Buffer Overflow
source: https://www.securityfocus.com/bid/33586/info Nokia Multimedia Player is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary code ...
PT-2009-2916 · Microsoft · Windows Mobile +1
Name of the Vulnerable Software and Affected Versions: Windows Mobile versions 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition Windows Mobile 6 Professional Description: A directory traversal issue in the OBEX FTP Service of the Microsoft Bluetooth stack allows remote authenticated users to...
Joomla PC Cookbook Component Blind SQL Injection
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " \n"; print " Joomla compccookbook Blind sql injection exploit \n"; print " \n"; print " Cyb3R-1sT \n"; print " cyb3r-1stathotmail.com \n"; print " \n"; print " Usage:perl file.pl host path \n"; print ...
CVE-2008-5537
PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
Design/Logic Flaw
PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
CVE-2008-5537
PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
CVE-2008-5537
CVE-2008-5537 affects PC Tools AntiVirus 4.4.2.0 (and related products in the family) when using Internet Explorer 6/7. The vulnerability enables bypass of malware detection in HTML documents by placing an MZ header ("EXE info") at the beginning and renaming the file to have no extension, a .txt ...
VMware虚拟硬件内存破坏漏洞
BUGTRAQ ID: 32597 CVECAN ID: CVE-2008-4917 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 如果guest操作系统向虚拟的硬件发送了恶意请求的话，就可能触发内存破坏，导致虚拟硬件写入非受控的物理内存区域。成功利用这个漏洞的攻击者可以完全控制HOST系统或导致拒绝服务。 VMWare Workstation 6.0.x VMWare Workstation 5.x VMWare ACE 2.0.x VMWare ACE 1.x VMWare Player 2.0.x VMWare Play...
Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability in the Ancillary Function Driver 'afd.sys'. A successful exploit of this vulnerability will let a local attacker completely compromise an affected computer. Technologies Affected Microsoft Windows Server 2003...
PC Tools Spyware Doctor未明拒绝服务漏洞
BUGTRAQ ID: 31630 CNCAN ID：CNCAN-2008100915 PC Tools Spyware Doctor是一款功能强大的间谍软件、广告软件监测移除程序。 PC Tools Spyware Doctor存在一个未明安全问题，可导致应用程序崩溃。 PC Tools Spyware Doctor 6.0 目前没有解决方案提供： http://www.pctools.com/spyware-doctor-antivirus/...
Nokia PC Suite 7.0 - Remote Buffer Overflow
Nokia PC Suite 7.0 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/31475/info Nokia PC Suite is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execu...
Nokia PC Suite 7.0 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/31475/info Nokia PC Suite is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the...
Unreal Tournament 3 1.3 - Directory Traversal
Luigi Auriemma Application: Unreal Tournament 3 http://www.unrealtournament3.com Versions: 1.3 ONLY both build 3601 and 3614 older versions are safe Platforms: Windows and Linux Bug: directory traversal in the web interface Exploitation: remote, versus server Date: 21 Sep 2008 Author: Luigi...
VMware OpenProcess本地特权提升漏洞
BUGTRAQ ID:30936 CVE ID：CVE-2008-3698 CNCVE ID：CNCVE-20083698 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMware OpenProces存在特权提升问题，本地攻击者可以利用漏洞在宿主系统上执行任意代码。 目前没有详细漏洞细节提供。 VMWare Workstation 5.5.8 build 108000 VMWare Workstation 5.5.8 VMWare Server 1.0.7 build 108231 VMWare Server 1.0.7...
Access Remote PC 4.5.1 Local Password Disclosure Exploit
No description provided by source. / Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan Application: Access Remote PC 4.5.1 and probably prior versions Vendor: www.access-remote-pc.com Vulnerable Description: Access Remote PC 4.5.1 discloses passwords to local users. Discovered &...
CVE-2008-3157
Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service resource consumption via a large number of sessions...
CVE-2008-3157
CVE-2008-3157 affects Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200. The vulnerability stems from not limiting concurrent sessions, enabling denial of service via a large number of sessions. The NVD lists a CVSS v2 base score of 5.0 (Medium) with network access, low attack complexity, a...
Nortel SIP多媒体PC客户端会话处理拒绝服务漏洞
Nortel Networks公司推出的SIP多媒体PC客户端是一个功能全面的多媒体即时通讯工具。 SIP多媒体PC客户端没有限制可生成的连接或活动窗口的数量，未经认证的远程攻击者可以创建大量会话，直到系统无法处理，导致耗尽客户端系统上的可用资源。 Nortel Networks 多媒体PC客户端SIP电话 4.x Novell ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.novell.com/security-alerts...
Nortel SIP多媒体PC客户端远程报文洪水拒绝服务漏洞
BUGTRAQ ID: 28994 Nortel SIP多媒体PC客户端是基于PC的应用程序，可提供强大的多媒体通讯功能。 Nortel SIP处理大量报文时存在漏洞，远程攻击者可能利用此漏洞导致程序崩溃不可用。 如果使用Nessus扫描工具向Nortel SIP多媒体PC客户端发送了大量报文的话，就可能触发缓冲区溢出，导致客户端出现错误消息并终止。 Nortel Networks 多媒体PC客户端SIP电话 4.0 Nortel Networks 多媒体PC客户端SIP电话 3.5 Nortel Networks ---------------...