Solaris 10 (x86) : 150158-01 (deprecated)

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Remote Procedure Call RPC. Supported versions that are affected are 8, 9, 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can...

libvirt: use-after-free in virNetMessageFree()

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by...

Low: Red Hat Security Advisory: quota security and bug fix update

An updated quota package that fixes one security issue and multiple bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

DEBIAN-CVE-2012-4423

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and segmentation fault via an RPC call with 1 an event as the RPC number or 2 an RPC number whose value is in a "gap" in the RPC dispatch table...

libvirt: null function pointer invocation in virNetServerProgramDispatchCall()

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and segmentation fault via an RPC call with 1 an event as the RPC number or 2 an RPC number whose value is in a "gap" in the RPC dispatch table...

DEBIAN-CVE-2012-0845

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an XML-RPC POST request that contains a smaller amount of data than specified...

libvirt: crash in virTypedParameterArrayClear

The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain API calls with typed parameters, which might allow remote authenticated users to cause a denial of service libvirtd crash via an RPC command with nparams set to zero, which triggers an out-of-bounds read...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

This update fixes the following security issues : - a flaw was found in the CIFSSMBWrite function in the Linux kernel Common Internet File System CIFS implementation. A remote attacker could send a specially crafted SMB response packet to a target CIFS client, resulting in a kernel panic denial o...

The zend framework xxe injection analysis-vulnerability warning-the black bar safety net

A few days ago online broke a zend framework vulnerability author: mkods Specifically described as follows: ; according to the description, the vulnerability occurs in the zend Framework xmlrpc module of an xxeXML external entity injection vulnerability this vulnerability can be read on server...

DEBIAN-CVE-2012-1182

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call...

samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call...

Moderate: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

DEBIAN-CVE-2011-3369

The addconversation function in conversations.c in EtherApe before 0.9.12 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an RPC packet, related to the getrpc function in decodeproto.c...

Remote Procedure Call Service - MSF Buffer Overflow

Document Title: =============== Remote Procedure Call Service - MSF Buffer Overflow References: =========== Download: http://www.vulnerability-lab.com/resources/videos/24.wmv View: http://www.youtube.com/watch?v=VD9-mj6Y5BI Release Date: ============= 2011-06-10 Vulnerability Laboratory ID VL-ID:...

Remote Procedure Call Service - MSF Buffer Overflow

Document Title: =============== Remote Procedure Call Service - MSF Buffer Overflow References: =========== Download: http://www.vulnerability-lab.com/resources/videos/24.wmv View: http://www.youtube.com/watch?v=VD9-mj6Y5BI Release Date: ============= 2011-06-10 Vulnerability Laboratory ID VL-ID:...

rhn_satellite: Improper channel comps information management

Red Hat Network RHN Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service failed yum operations via vectors related to configuration and package group comps.xml files for channels...

kernel: deficiency in handling of invalid data packets in lockd

Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux RHEL 6 might allow remote attackers to cause a denial of service crash via malformed data in a packet, related to lockd and the svcxprtreceived...

Advantech/Broadwin WebAccess RPC Vulnerability

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-11-094-02A Advantech/Broadwin WebAccess RPC Vulnerability that was published November 4, 2011, on the NCCIC/ICS‑CERT Web site. --------- Begin Update B Part 1 of 5 -------- Independent security researcher Rubén...

Microsoft Windows Netlogon RPC Null dereference Denial of Service (MS10-101; CVE-2010-2742)

The Netlogon Remote Protocol is a remote procedure call RPC interface that is used for user and machine authentication on domain-based networks. A remote denial of service vulnerability has been discovered in implementations of the Netlogon RPC Service on affected versions of Windows Server. The...

Windows Local Procedure Call Privilege Elevation Vulnerability (2360937)

This host is missing a critical security update according to Microsoft Bulletin MS10-084. OpenVAS Vulnerability Test $Id: secpodms10-084.nasl 5361 2017-02-20 11:57:13Z cfi $ Windows Local Procedure Call Privilege Elevation Vulnerability 2360937 Authors: Madhuri D Copyright c 2010 SecPod,...