Solaris Update for print 141026-08

Check for the Version of print OpenVAS Vulnerability Test Solaris Update for print 141026-08 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Solaris Update for print 141026-08

Check for the Version of print OpenVAS Vulnerability Test Solaris Update for print 141026-08 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

HP Web Jetadmin Detection

The remote host is running HP Web Jetadmin, a management application for networked print devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44328; scriptversion"1.8"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Web Jetadmin Detection";...

CVE-2010-0003

The printfatalsignal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local use...

CVE-2010-0003

The printfatalsignal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local use...

CVE-2009-3637

Stack-based buffer overflow in the MAddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command...

Linux Kernel 'print_fatal_signal()'本地信息泄漏漏洞

Bugraq ID: 37724 Linux是一款开放源代码的操作系统。 当print-fatal-signals启用时，通过简单的跳到用户空间的地址可Dump出任意内核可访问的内存。 或如果部分硬件在读的过程中可导致系统崩溃。 重要信号处理器会在执行地址Dump出16个字节，此地址完全可由ring 3级别用户控制。 另外，当跳到没有映射的地址时，将触发多大16个额外的无用页面错误，导致系统变慢或效率不高 此选项默认在系统中关闭，并且只存在在i386系统上。 Linux kernel 2.6.32 Linux kernel 2.6.31 5 Linux kernel 2.6.31 .2...

CVE-2009-4525

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via crafted data in a list of links...

CVE-2009-4526

The Send by e-mail sub-module in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, does not properly enforce privilege requirements, which allows remote attackers to read page titles by requesting a "Send to friend" form...

Code injection

The Send by e-mail sub-module in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, does not properly enforce privilege requirements, which allows remote attackers to read page titles by requesting a "Send to friend" form...

CVE-2009-4526

The CVE-2009-4526 entry affects the Drupal module Print (aka Printer, e-mail and PDF versions), specifically the Send by e-mail sub-module. Affected versions are 5.x before 5.x-4.9 and 6.x before 6.x-1.9. The vulnerability arises from not properly enforcing privilege requirements, allowing remote...

CVE-2009-4526

The Send by e-mail sub-module in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, does not properly enforce privilege requirements, which allows remote attackers to read page titles by requesting a "Send to friend" form...

CVE-2009-4525

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via crafted data in a list of links...

CVE-2009-4525

CVE-2009-4525 is a Drupal Print module XSS vulnerability: versions 5.x before 5.x-4.9 and 6.x before 6.x-1.9 allow remote attackers to inject arbitrary web script or HTML via crafted data in a list of links. Remediation details are not provided in the supplied documents.

CVE-2009-4525: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via crafted data in a list of links...

CVE-2009-4526: Undefined Security Weakness

The Send by e-mail sub-module in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, does not properly enforce privilege requirements, which allows remote attackers to read page titles by requesting a "Send to friend" form...

DEBIAN-CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service daemon crash or hang via a client disconnection during listin...

CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service daemon crash or hang via a client disconnection during listin...

cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service daemon crash or hang via a client disconnection during listin...

cups: Several XSS flaws in forms processed by CUPS web interface

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...