Mandriva Linux Security Advisory : krb5 (MDVSA-2008:069)

Multiple memory management flaws were found in the GSSAPI library used by Kerberos that could result in the use of already freed memory or an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5901, CVE-2007-5971. A flaw was...

Mandriva Linux Security Advisory : krb5 (MDVSA-2008:070)

A memory management flaw was found in the GSSAPI library used by Kerberos that could result in an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5971. A flaw was discovered in how the Kerberos krb5kdc handled Kerberos v4...

CVE-2009-1350

Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer...

CVE-2009-1350

CVE-2009-1350 affects Novell NetIdentity Client (xtagent.exe). A remote attacker can trigger a dereference of an arbitrary pointer via the XTIERRPCPIPE named pipe by sending crafted RPC messages, leading to remote code execution. Affected product/version: Novell Client NetIdentity Agent prior to ...

IBM WebSphere Application Server < 6.1.0.23 Multiple Vulnerabilities

Binary data 4996.prm...

IBM WebSphere Application Server 7.0 < Fix Pack 3 Multiple Vulnerabilities

Binary data 4991.prm...

IBM WebSphere Application Server < 6.1.0.23 Multiple Flaws

IBM WebSphere Application Server 6.1 before Fix Pack 23 appears to be installed on the remote host. Such versions are reportedly affected by multiple vulnerabilities : - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. PK66676 - It may be possible...

Vulnerabilities in Windows Could Allow Elevation of Privilege (959454)

This host is missing a critical security update according to Microsoft Bulletin MS09-012. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Samba lsa_io_trans_names Heap Overflow

This module triggers a heap overflow in the LSA RPC service of the Samba daemon. This module uses the TALLOC chunk overwrite method credit Ramon and Adriano, which only works with Samba versions 3.0.21-3.0.24. Additionally, this module will not work when the Samba "log level" parameter is higher...

Null pointer dereference

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

CVE-2008-6712

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

CVE-2008-6712

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

CVE-2008-6712

CVE-2008-6712 affects the HTTP/XML-RPC service in Crysis 1.21 and earlier . The vulnerability allows remote attackers to cause a denial of service (crash) by sending a long HTTP request that triggers a NULL pointer dereference . Documents confirm the affected component and the crash-based impact ...

Novell NetIdentity代理XTIERRPCPIPE远程代码执行漏洞

BUGTRAQ ID: 34400 NetIdentity代理是Novell Client中所使用的为Windows平台上基于Web的应用程序提供认证的工具。 NetIdentity代理的xtagent.exe服务没有正确地过滤通过XTIERRPCPIPE命名管道所传送的RPC请求，远程攻击者可以通过提交恶意RPC消息引用任意指针，导致以当前用户权限执行任意代码。 Novell NetIdentity Agent 1.2.3 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

IBM WebSphere Application Server < 6.0.2.33 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0.2 before Fix Pack 33 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. PK66676 - The PerfServlet code...

IBM WebSphere Application Server 7.0 < Fix Pack 3

IBM WebSphere Application Server 7.0 before Fix Pack 3 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Under certain conditions it may be possible to access administrative console user sessions. PK74966 - The administrative console is...

Mandriva Update for krb5 MDVSA-2008:070 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:070 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for krb5 MDVSA-2008:069 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:069 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for librpcsecgss MDKSA-2007:181 (librpcsecgss)

Check for the Version of librpcsecgss OpenVAS Vulnerability Test Mandriva Update for librpcsecgss MDKSA-2007:181 librpcsecgss Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for autofs MDVSA-2008:009 (autofs)

Check for the Version of autofs OpenVAS Vulnerability Test Mandriva Update for autofs MDVSA-2008:009 autofs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...