FreeBSD : drupal -- multiple vulnerabilities (59a0af97-dbd4-11e5-8fa8-14dae9d210b8)

Drupal Security Team reports : - File upload access bypass and denial of service File module - Drupal 7 and 8 - Moderately Critical - Brute force amplification attacks via XML-RPC XML-RPC server - Drupal 6 and 7 - Moderately Critical - Open redirect via path manipulation Base system - Drupal 6, 7...

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001

File upload access bypass and denial of service File module - Drupal 7 and 8 - Moderately Critical A vulnerability exists in the File module that allows a malicious user to view, delete or substitute a link to a file that the victim has uploaded to a form while the form has not yet been submitted...

CVE-2014-0316

Memory leak in the Local RPC LRPC server implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service memory consumption and bypass the ASLR protecti...

Computer Associates Products Message Engine RPC Server Multiple Buffer Overflow Vulnerabilities (2)

No description provided by source. source: http://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it...

Computer Associates Products Message Engine RPC Server Multiple Buffer Overflow Vulnerabilities (1)

No description provided by source. source: http://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it...

Kaspersky Internet Security prremote.dll Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Kaspersky Internet Security. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the built-in RPC server...

Unable to Add Machine With RAS (Remote Access Service) Enabled

Challenge When trying to add a Windows Server that has the Remote Acces role enabled to Veeam Backup & Replication as a Managed Server, the operation fails with: Failed to check whether remote installer service is available. The RPC server is unavailable. RPC function call failed. Function name:...

RedHat Update for kernel RHSA-2011:0329-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for kernel RHSA-2011:0329-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2011:0329-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RPC function call failed. The RPC server is unavailable. w/ Application-Aware Processing

Challenge A Backup or Replication job utilizing Application-Aware Processing fails with the error: RPC error:The RPC server is unavailable. Code: 1722 Cause Possible causes include, organized from most common to rarest: The ports that Veeam Backup & Replication is attempting to use are blocked by...

CVE-2011-0714

Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux RHEL 6 might allow remote attackers to cause a denial of service crash via malformed data in a packet, related to lockd and the svcxprtreceived...

Design/Logic Flaw

Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux RHEL 6 might allow remote attackers to cause a denial of service crash via malformed data in a packet, related to lockd and the svcxprtreceived...

CVE-2011-0714

Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux RHEL 6 might allow remote attackers to cause a denial of service crash via malformed data in a packet, related to lockd and the svcxprtreceived...

CVE-2011-0714

CVE-2011-0714 affects the Linux kernel 2.6.32 as patched for Red Hat Enterprise Linux 6, specifically involving the RPC server sockets functionality. The use-after-free vulnerability is triggered in a Red Hat patch related to lockd and the svc_xprt_received path, allowing remote attackers to cras...

RHEL 6 : kernel (RHSA-2011:0329)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0329 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: A use-after-fre...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

IBM AIX rpc.cmsd Stack Buffer Overflow Vulnerability

No description provided by source. / Rodrigo Rubira Branco BSDaemon - rodrigo noSPAM risesecurity . org http://www.kernelhacking.com/rodrigo http://www.risesecurity.org / include stdlib.h include stdio.h include string.h include unistd.h include rpc/rpc.h define CMSDPROG 100068 define CMSDVERS 4...

IBM AIX ToolTalk RPC Server Remote Buffer Overflow

ToolTalk is an inter-application communications system developed by Sun Microsystems in order to allow applications to communicate with each other at runtime. The ToolTalk service is designed to facilitate the development of inter-operating applications that serve individuals and work groups. A...

GLSA-200805-21 : Roundup: Permission bypass

The remote host is affected by the vulnerability described in GLSA-200805-21 Roundup: Permission bypass Philipp Gortan reported that the xml-rpc server in Roundup does not check property permissions CVE-2008-1475. Furthermore, Roland Meister discovered multiple vulnerabilities caused by unspecifi...

PYSEC-2008-10

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...