HP-UX PHKL_31500 : s700_800 11.23 Sept04 base patch

s700800 11.23 Sept04 base patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service DoS...

HP-UX PHNE_28138 : s700_800 11.22 ONC/NFS General Release/Performance Patch

s700800 11.22 ONC/NFS General Release/Performance Patch : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerability in rpc.yppasswdd. HPSBUX00242 SSRT2330 - A potential vulnerability in ypxfrd may allow a local user to read files without permission. -...

HP-UX Security patch : PHNE_8020

The remote host is missing HP-UX Security Patch number PHNE8020 . Security Vulnerability in rpc.pcnfsd & rpc.statd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16828;...

HP-UX PHNE_30808 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)

s700800 11.04 VVOS ONC/NFS General Release/Perf Patch : A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service DoS. %NASLMINLEVEL 70300 C Tenable Network Security...

HP-UX Security patch : PHSS_25137

The remote host is missing HP-UX Security Patch number PHSS25137 . Sec. Vulnerability in rpc.ttdbserverd rev.3 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16967;...

HP-UX PHNE_29449 : s700_800 11.22 ONC/NFS General Release/Performance Patch

s700800 11.22 ONC/NFS General Release/Performance Patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a...

Mandrake Linux Security Advisory : python (MDKSA-2005:035)

A flaw in the python language was found by the development team. The SimpleXMLRPCServer library module could permit remote attackers unintended access to internals of the registered object or it's module, or possibly even other modules. This only affects python XML-RPC servers that use the...

CVE-2003-1079

Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service memory consumption via certain arguments in RPC calls that cause large amounts of memory to be allocated...

CVE-2002-1584

Unknown vulnerability in the AUTHDES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges...

CVE-2002-1584

Technical details about CVE-2002-1584 are not publicly disclosed in the provided documents; no concrete information on affected products, root cause, or remediation is available here. Monitor for updates.

CVE-2003-1079

The CVE-2003-1079 entry concerns a vulnerability in UDP RPC used by Solaris (SPARC: 2.5.1–9; x86: 2.5.1–8). The underlying issue is that certain RPC call arguments can cause excessive memory allocation, enabling remote attackers to trigger a denial of service via memory consumption. The descripti...

Python: Arbitrary code execution through SimpleXMLRPCServer

Background Python is an interpreted, interactive, object-oriented, cross-platform programming language. Description Graham Dumpleton discovered that XML-RPC servers making use of the SimpleXMLRPCServer library that use the registerinstance method to register an object without a dispatch method ar...

CVE-2003-1079: Undefined Security Weakness

Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service memory consumption via certain arguments in RPC calls that cause large amounts of memory to be allocated...

CVE-2002-1584: Undefined Security Weakness

Unknown vulnerability in the AUTHDES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges...

[SECURITY] [DSA 666-1] New Python2.2 packages fix unauthorised XML-RPC internals access

-------------------------------------------------------------------------- Debian Security Advisory DSA 666-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 666-1] New Python2.2 packages fix unauthorised XML-RPC internals access

-------------------------------------------------------------------------- Debian Security Advisory DSA 666-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

python -- SimpleXMLRPCServer.py allows unrestricted traversal

According to Python Security Advisory PSF-2005-001, The Python development team has discovered a flaw in the SimpleXMLRPCServer library module which can give remote attackers access to internals of the registered object or its module or possibly other modules. The flaw only affects Python XML-RPC...

Samba: Integer overflow

Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Description Samba contains a bug when unmarshalling specific MS-RPC requests from clients. Impact A remote attacker may be able to execute...

Immunity Canvas: MS04_031

Name| ms04031 ---|--- CVE| CVE-2004-0206 Exploit Pack| CANVAS Description| Microsoft Windows NetDDE RPC Overflow Notes| CVE Name: CVE-2004-0206 VENDOR: Microsoft MSADV: MS04-031 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS04-031.mspx CVE Url:...

CVE-2004-0569

The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service system crash via a malicious message, possibly related to improper length values...