81 matches found
RealNetworks Helix Server Multiple Remote Vulnerabilities
RealNetworks Helix Server is prone to multiple remote vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Secunia Research: Helix Server SNMP Master Agent Service Two Denial of Service Vulnerabilities
====================================================================== Secunia Research 09/04/2012 - RealNetworks Helix Server SNMP Master Agent - - Two Denial of Service Vulnerabilities - ====================================================================== Table of Contents Affected...
Secunia Research: RealNetworks Helix Server Credentials Disclosure Security Issue
====================================================================== Secunia Research 09/04/2012 - RealNetworks Helix Server Credentials Disclosure Security Issue - ====================================================================== Table of Contents Affected...
CVE-2012-2268
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different...
CVE-2012-0942
Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication credentials...
Code injection
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service daemon crash by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1923...
Buffer overflow
Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication credentials...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service stack consumption and daemon crash via a malformed URL...
Design/Logic Flaw
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under admbdb\users, which allows local users to obtain sensitive information by reading a database...
CVE-2012-1985
Cross-site request forgery CSRF vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service stack consumption and daemon crash via a malformed URL...
CVE-2012-0942
CVE-2012-0942 affects RealNetworks Helix Server (and Helix Mobile Server) 14.x prior to 14.3.x. The vulnerability lies in the rn5auth.dll credential parsing path: GetNameValuePair() copies data with strcpy into a stack buffer, causing a stack-based buffer overflow. This allows remote attackers to...
CVE-2012-2267
RealNetworks Helix Server and Helix Mobile Server 14.x (SNMP Master Agent) are affected by CVE-2012-2267, a denial-of-service vulnerability where a remote attacker can crash the daemon by opening and closing a TCP connection to port 705. This is described as a DoS caused by the SNMP Master Agent ...
CVE-2012-1985
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x are affected by CSRF (CVE-2012-1985). Exploitation can hijack an administrator’s session via a malformed URL, potentially causing a stack consumption issue and daemon crash (DoS). The issue is documented across multiple feeds (N...
CVE-2012-2268
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different...
Vulnerabilities in RealNetworks Helix Server Could Allow Arbitrary Script Execution
Executive Summary Microsoft is providing notification of the discovery and remediation of multiple vulnerabilities affecting RealNetworks Helix Server software version 14.2.0.212 and earlier. Microsoft discovered and disclosed these vulnerabilities under coordinated vulnerability disclosure to th...
RealNetworks Helix Server 14.x < 14.3.x Multiple Vulnerabilities
According to its banner, the remote host is running version 14.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are potentially affected by multiple vulnerabilities : - Administrative and user credentials are insecurely stored in a flat file database. This file may be accessed ...
CVE-2010-4235
Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header...
Format string
Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header...
Stack overflow
Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request...
RealNetworks Helix Server "x-wap-profile"头选项格式串处理漏洞
BUGTRAQ ID: 47110 CVE ID: CVE-2010-4235 RealNetwork Helix Server是一款支持多格式、跨平台的流媒体服务器软件，能将高质量的多媒体内容发不到任何网络位置。 Helix Server在处理请求中的"x-wap-profile"头选项时存在格式串处理漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Real Networks Helix Mobile Server 14.0.0 Real Networks Helix Mobile Server 13.x Real Networks Helix Mobile...