How to identify and clean Conficker infections

As the world prepares for the complete destruction of the Internet tomorrow when the Conficker worm makes a small change in its communication protocol, a voice of reason has emerged from the wilderness. The Honeynet Project on Monday released a paper with a detailed analysis of the worm as well a...

Ubuntu Update for samba vulnerabilities USN-460-1

Ubuntu Update for Linux kernel vulnerabilities USN-460-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4601.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for samba vulnerabilities USN-460-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2008-6219

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

Design/Logic Flaw

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

Vulnerability in Server Service Could Allow Remote Code Execution (958644)

This host is missing a critical security update according to Microsoft Bulletin MS08-067. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Based...

Server Service Could Allow Remote Code Execution Vulnerability (958644)

This host is missing a critical security update according to Microsoft Bulletin MS08-067. OpenVAS Vulnerability Test $Id: secpodms08-067900055.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: Server Service Could Allow Remote Code Execution Vulnerability 958644 Authors: Chandan S Copyright:...

CVE-2007-4349

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

Out-of-bounds

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

CVE-2007-4349

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

Stack overflow

Multiple stack-based buffer overflows in Computer Associates CA Alert Notification Service Alert.exe 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote...

CVE-2007-4620

Multiple stack-based buffer overflows in Computer Associates CA Alert Notification Service Alert.exe 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote...

Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in nwspool.dll which is responsible for handling RPC requests through...

Design/Logic Flaw

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing...

CVE-2008-0640

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing...

Debian Security Advisory DSA 349-1 (nfs-utils)

The remote host is missing an update to nfs-utils announced via advisory DSA 349-1. OpenVAS Vulnerability Test $Id: deb3491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 349-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Trend Micro antiviral products multiple security vulnerabilities

Buffer overflow in SSAPI engine on oversized local path. Buffer overflow in ServerProtect on different TCP/5168 RPC requests...

Stack overflow

Multiple stack-based buffer overflows in the Spooler service nwspool.dll in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the 1 RpcAddPrinterDriver, 2 RpcGetPrinterDriverDirectory, and other unspecified RPC requests,...

CVE-2007-2954

Multiple stack-based buffer overflows in the Spooler service nwspool.dll in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the 1 RpcAddPrinterDriver, 2 RpcGetPrinterDriverDirectory, and other unspecified RPC requests,...

CVE-2007-2954

Multiple stack-based buffer overflows in the Spooler service nwspool.dll in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the 1 RpcAddPrinterDriver, 2 RpcGetPrinterDriverDirectory, and other unspecified RPC requests,...

CVE-2007-4539

The WebService XML-RPC interface in Bugzilla 2.23.3 through 3.0.0 does not enforce permissions for the time-tracking fields of bugs, which allows remote attackers to obtain sensitive information via certain XML-RPC requests, as demonstrated by the 1 Deadline and 2 Estimated Time fields...